Summary
TIA Project-Server formerly known as TIA Multiuser Server contains an untrusted search path vulnerability that could allow an attacker to escalate privileges, when tricking a legitimate user to start the service from an attacker controlled path.
Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens is preparing further updates and recommends specific countermeasures for products where updates are not, or not yet available.
Vulnerabilities 1
-
Medium 6.7
A vulnerability has been identified in TIA Multiuser Server V14 (All versions), TIA Multiuser Server V15 (All versions …
Revision history
-
#3
Clarify no fix planned for TIA Project-Server V16
-
#2
Added fix for TIA Project-Server V17
-
#1
Publication Date
References
-
SSA-640968: Untrusted Search Path Vulnerability in TIA Project-Server formerly known as TIA Multiuser Server - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-640968.html