Siemens Software Center vulnerability exploited in ClickFix malware attacks

Siemens reported that attackers exploited a vulnerability in Siemens Software Center as part of a malware campaign. The flaw allowed an authenticated local attacker to place a malicious DLL in a searched folder and execute code with the privileges of Software Center.