Untrusted Search Path Vulnerability in TIA Multiuser Server and TIA Project-Server by Siemens
CVE-2022-35868
6.7MEDIUM
Key Information:
- Vendor
Siemens
- Vendor
- CVE Published:
- 14 February 2023
What is CVE-2022-35868?
An untrusted search path vulnerability was found in Siemens TIA Multiuser Server and TIA Project-Server that could be exploited by an attacker. By manipulating the legitimate user into initiating the service from a path controlled by the attacker, the attacker could gain unauthorized privileges. This affects multiple versions of the affected products, highlighting the need for prompt updates and vigilant security practices.
Affected Version(s)
TIA Multiuser Server V14 0
TIA Multiuser Server V15 All versions < V15.1 Update 8
TIA Project-Server All versions < V1.1