A binary in Siemens SINEC INS is compiled with the cap_dac_override capability, allowing the process to bypass standard file permission checks. This gives the process unrestricted access to the file system, enabling a local attacker to modify arbitrary files and eventually gain root privileges. The weakness is classified as CWE‑250 – execution with the privileges of another process, leading to complete loss of integrity and confidentiality for the host.

Siemens SINEC INS versions prior to V1.0 SP2 Update 6 are affected. Specifically, any installation that includes the vulnerable binary with the cap_dac_override capability is at risk.

The CVSS score of 8.7 indicates a high severity vulnerability. Although the EPSS score is not available, the lack of a KEV listing does not diminish the local exploitation risk – a user with local access can directly launch the vulnerable binary. The likely attack vector is a local privilege escalation path that requires the attacker to run or trigger the vulnerable process. Once bypassing file system checks, the attacker can modify system files and achieve full root control, effectively compromising the entire system.