Description
A vulnerability has been identified in TIA Administrator (All versions < V3.0.6). The affected application allows low-privileged users to trigger installations by overwriting cache files and modifying the downloads path. This would allow an attacker to escalate privilege and exceute arbitrary code.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | TIA Administrator | < V3.0.6 | V3.0.6 |
Advisories 3
- NCSC-2025-0211 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Jul 8, 2025
- ICSA-25-191-03 Siemens TIA Administrator CISA ICS & IT advisories · Jul 8, 2025
- SSA-573669 SSA-573669: Multiple Vulnerabilities in TIA Administrator Before V3.0.6 Siemens ProductCERT · Jul 8, 2025