THREAT OPS › Threat News › Siemens IAM Client
Siemens IAM Client
<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-202-05.json"><strong>View CSAF</strong></a></p> <h2>Summary</h2> <p><strong>Multiple Siemens products are affected by unquoted search path vulnerability in IAM Client. This could allow an authenticated local attacker to perform privilege escalation. Siemens has released new versions for several affected produ
MITRE ATT&CK techniques
- VulnerabilitiesT1588.006
Indicators of compromise
- CVE-2025-40945cve
- https://www.cve.org/CVERecord?id=CVE-2025-40945url
- https://support.sw.siemens.com/product/222981661/url
- https://support.sw.siemens.com/product/246738425/url
- https://support.sw.siemens.com/product/297028302/url
- https://support.sw.siemens.com/product/229029598/url
- https://support.sw.siemens.com/product/275652363/url
- https://support.sw.siemens.com/product/209349590/url
- https://support.sw.siemens.com/product/289054037/url
- https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:Hurl
- https://www.siemens.com/cert/operational-guidelines-industrial-securityurl
- https://www.siemens.com/industrialsecurityurl
- https://www.siemens.com/cert/advisoriesurl
- https://www.siemens.com/productcert/terms-of-useurl
- 225.0.13.3ipv4
- 226.0.04.003ipv4
- 4.5.0.2ipv4
Original source: https://www.cisa.gov/news-events/ics-advisories/icsa-26-202-05
Same event, other sources
- Siemens IAM Clientcisa_advisories · 2026-07-21