Siemens Software Center Vulnerability Exploited in ClickFix Malware Attacks
Siemens revealed on Monday that threat actors have exploited a vulnerability in Siemens Software Center as part of a malware campaign.
Siemens Software Center handles the download, installation, activation and updating of software that customers have bought, and it can also be used to start free trials.
The vulnerability, tracked as CVE-2026-110936, exists because the program doesn’t properly restrict the locations it searches for DLL files. An authenticated local attacker could plant a malicious DLL in one of those folders and have their code executed with the same privileges as Software Center.
Siemens disclosed the flaw on October 15 in an advisory that assigned it a CVSS v4 score of 8.4. Two days later, the company updated the advisory to tell customers that version 4.0.9.8 resolves the issue.
Users who already have the application installed will receive the fix automatically the next time they launch it.
The advisory didn’t...
Copyright of this story solely belongs to www.securityweek.com. To see the full text click HERE
