7.8
High
CVE-2025-23365 A vulnerability has been identified in TIA Administrator (All versions < V3.0.6)
Description
A vulnerability has been identified in TIA Administrator (All versions < V3.0.6). The affected application allows low-privileged users to trigger installations by overwriting cache files and modifying the downloads path. This would allow an attacker to escalate privilege and exceute arbitrary code.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| TIA Administrator 3.0 | earliest → < 3.0.6 | 3.0.6 |
References
- cert-portal.siemens.com cert-portal.siemens.com
Timeline
- Published
- Last modified
Other CVEs of TIA Administrator
The 7 CVEs of TIA Administrator →
CVE-2025-30033
The affected setup component is vulnerable to DLL hijacking
7.8
High
CVE-2025-23364
A vulnerability has been identified in TIA Administrator (All versions < V3.0.6)
6.2
Medium
CVE-2024-45386
A vulnerability has been identified in SIMATIC PCS neo V4.0 (All versions), SIMATIC PCS neo V4.1 (All versions < V4.1…
8.8
High
CVE-2023-38533
A vulnerability has been identified in TIA Administrator (All versions < V3 SP2)
3.3
Low