Local privilege escalation via writable service executables

Local privilege escalation in Siemens SIPORT before 3.4.0 allows local users to gain elevated privileges by replacing service executables. Installation folders receive permissions that let unprivileged accounts overwrite service binaries later launched with elevated rights. Exploitation requires a local unprivileged account with write access to an affected installation path and results in execution at the service privilege level.