Siemens Software Center Uncontrolled Search Path Element Vulnerability
Siemens — Software Center
- Added to KEV catalog
- 20 October 2026
- Federal remediation due date
- 3 November 2026
- Weakness classification (CWE)
- CWE-427
AI Breakdown
What it is
Siemens Software Center versions prior to V4.0.9.8 contain a security vulnerability where the application loads dynamic-link library (DLL) files from an uncontrolled search path. An authenticated local attacker can exploit this by placing a malicious DLL into a directory searched by the application. Once loaded, the rogue file allows the attacker to execute arbitrary code with the permissions of the vulnerable software.
Why it matters
This vulnerability allows attackers with local access to run unauthorized commands and deepen their control over the affected system. While known use in ransomware campaigns is currently unknown, its presence in CISA's catalog confirms active exploitation risk. Organizations running vulnerable Siemens software face potential compromise of operational environments if these systems remain unaddressed.
Recommended action
Identify all systems running affected versions of Siemens Software Center and immediately apply vendor-recommended updates or mitigations. If mitigations are unavailable, follow CISA guidance to discontinue use of the product or isolate affected assets from critical networks. Ensure your team adheres to CISA BOD 26-04 security update priorities and conducts forensics triage as required.
AI-generated from CISA and NVD data — treat as a starting point, not a substitute for your own risk assessment.
CISA Description
Siemens Software Center contains an uncontrolled search path element vulnerability that could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading to arbitrary code execution with the privileges of the affected application.
Required action
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Notes
https://productcert.siemens.com/productcert/html/ssa-580366.html ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-110936
NVD Technical Description
A vulnerability has been identified in Siemens Software Center (All versions < V4.0.9.8). The affected application loads dynamic-link libraries (DLLs) from an uncontrolled search path. This could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading to arbitrary code execution with the privileges of the affected application.
More Siemens Vulnerabilities
Is this vulnerability present in your environment?
CRS delivers independent VAPT assessments that identify exactly which known-exploited vulnerabilities exist in your network, applications, and infrastructure.
Explore VAPT Services