Siemens SIMARIS Configuration (Update A)

An attacker with local access to an engineering workstation could escalate privileges to gain control over SIMARIS configuration data, potentially allowing unauthorized changes to electrical system designs or settings that feed into operational controls.

Electrical utilities and power generation facilities using Siemens SIMARIS configuration for switchgear design and electrical system configuration are affected. This impacts engineering teams and maintenance personnel who use SIMARIS workstations to design or modify electrical distribution systems that feed into operational equipment.

An attacker must first gain local access to a workstation running SIMARIS configuration. Once logged in with standard user privileges, they can exploit the vulnerability to escalate to administrator level, granting access to all configuration data and system settings without detection.