Siemens SENTRON powermanager
Plan Patch7.8ICS-CERT ICSA-21-315-10Nov 9, 2021
Attack VectorLocal
Auth RequiredLow
ComplexityLow
User InteractionNone needed
Summary
SENTRON powermanager V3 is affected by a privilege escalation vulnerability (CWE-732) that allows a local attacker with limited user privileges to inject arbitrary code and escalate to higher privileges. The vulnerability is not remotely exploitable and requires local access to the application server. Siemens has released a security patch for SENTRON powermanager v3.6 HF1. Mitigation includes restricting local server access, enforcing least-privilege user accounts, implementing physical access controls to the application server, and following Siemens industrial security guidelines.
What this means
What could happen
A local attacker with limited user privileges on the SENTRON powermanager server could inject arbitrary code and escalate to higher privileges, potentially allowing them to alter power management settings, disable alarms, or disrupt electrical distribution operations.
Who's at risk
Energy utilities and electrical power distribution operators who rely on Siemens SENTRON powermanager V3 for monitoring and managing power distribution equipment. This includes municipal electric utilities, industrial facilities with power management systems, and any organization using this software to oversee switchgear and electrical load balancing.
How it could be exploited
An attacker with local access to the SENTRON powermanager application server (e.g., an untrusted employee or contractor with user-level access) could exploit this privilege escalation vulnerability to inject malicious code, gain administrative control of the system, and manipulate power management parameters or monitoring functions.
Prerequisites
- Local access to the SENTRON powermanager application server
- Non-administrative user account on the server
- Ability to execute code or interact with the vulnerable application
Privilege escalation possibleLocal exploitation only (requires physical or trusted-network access)Affects power management infrastructureLow complexity attack
Exploitability
Low exploit probability (EPSS 0.0%)
Affected products (1)
ProductAffected VersionsFix Status
SENTRON powermanager V3All versions3.6 HF1 and apply the security patch
Remediation & Mitigation
0/4
Do now
0/2HARDENINGRestrict local server access to only authorized personnel; implement physical and logical access controls to the application server
HARDENINGEnforce least-privilege user principle—ensure users have only the minimum permissions needed for their role
Schedule — requires maintenance window
0/1Patching may require device reboot — plan for process interruption
HOTFIXUpdate SENTRON powermanager V3 to version 3.6 HF1 and apply the released security patch
Long-term hardening
0/1HARDENINGSegment the SENTRON powermanager network from untrusted networks and limit SSH/RDP access to the server
CVEs (1)
↑↓ Navigate · Esc Close
API:
/api/v1/advisories/c009253f-69c4-48b2-a280-a4b2e843ee7e