



SINAMICS STARTER: All versions prior to v5.4 HF2.SIMATIC S7-1500 Software Controller: All versions prior to v21.8.SIMATIC PCS neo: All versions prior to v3.0 SP1.SIMATIC NET PC software: All versions after v16 and prior to v16 Upd3.The following Siemens products are affected: Successful exploitation of this vulnerability could allow authorized local users with administrative privileges to execute custom code with SYSTEM level privileges. This updated advisory is a follow-up to the advisory update titled ICSA-20-161-04 Siemens SIMATIC, SINAMICS, SINEC, SINEMA, SINUMERIK (Update J) that was published April 14, 2022, to the ICS webpage on 3. Vulnerability: Unquoted Search Path or Element.Equipment: SIMATIC, SINAMICS, SINEC, SINEMA, SINUMERIK.
