A vulnerability has been reported in Siemens SIMATIC STEP 7 and PCS 7, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to the application loading libraries in an insecure manner. This can be exploited to load an arbitrary library by tricking a user into opening a project file located on a remote WebDAV or SMB share.

The vulnerability is reported in the following products:
* Siemens SIMATIC STEP7 versions prior to 5.5 SP1.
* Siemens SIMATIC PCS7 versions 7.1 SP3 and prior.

Solution
Update to version 5.5 SP1 or apply Service Pack.

Provided and/or discovered by
Reported by the vendor.

Original Advisory
http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-110665.pdf

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers