7.8
Élevée
CVE-2025-23365 A vulnerability has been identified in TIA Administrator (All versions < V3.0.6)
Description
A vulnerability has been identified in TIA Administrator (All versions < V3.0.6). The affected application allows low-privileged users to trigger installations by overwriting cache files and modifying the downloads path. This would allow an attacker to escalate privilege and exceute arbitrary code.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| TIA Administrator 3.0 | premières → < 3.0.6 | 3.0.6 |
Références
- cert-portal.siemens.com cert-portal.siemens.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de TIA Administrator
Les 7 CVE de TIA Administrator →
CVE-2025-30033
The affected setup component is vulnerable to DLL hijacking
7.8
Élevée
CVE-2025-23364
A vulnerability has been identified in TIA Administrator (All versions < V3.0.6)
6.2
Moyenne
CVE-2024-45386
A vulnerability has been identified in SIMATIC PCS neo V4.0 (All versions), SIMATIC PCS neo V4.1 (All versions < V4.1…
8.8
Élevée
CVE-2023-38533
A vulnerability has been identified in TIA Administrator (All versions < V3 SP2)
3.3
Faible