SSA-640968

csafDEsiemens_psirt

SSA-640968: Untrusted Search Path Vulnerability in TIA Project-Server formerly known as TIA Multiuser Server

view advisory published 2023-02-14

TIA Project-Server formerly known as TIA Multiuser Server contains an untrusted search path vulnerability that could allow an attacker to escalate privileges, when tricking a legitimate user to start the service from an attacker controlled path. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens is preparing further updates and recommends specific countermeasures for products where updates are not, or not yet available.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2022-35868US——
A vulnerability has been identified in TIA Multiuser Server V14 (All versions), TIA Multiuser Server V15 (All versions < V15.1 Update 8), TIA Project-Server (All versions < V1.1),…
02

references

External citations — patches, advisories, analysis.

03

remediations (10)

  • MitigationTIA Multiuser Server V14

    Make sure that the directory that is set as working directory when starting the TIA Project-Server or TIA Multiuser Server does not contain untrusted files.

  • MitigationTIA Multiuser Server V15

    Make sure that the directory that is set as working directory when starting the TIA Project-Server or TIA Multiuser Server does not contain untrusted files.

  • MitigationTIA Project-Server

    Make sure that the directory that is set as working directory when starting the TIA Project-Server or TIA Multiuser Server does not contain untrusted files.

  • MitigationTIA Project-Server V16

    Make sure that the directory that is set as working directory when starting the TIA Project-Server or TIA Multiuser Server does not contain untrusted files.

  • MitigationTIA Project-Server V17

    Make sure that the directory that is set as working directory when starting the TIA Project-Server or TIA Multiuser Server does not contain untrusted files.

  • No fix plannedTIA Multiuser Server V14

    Currently no fix is planned

  • No fix plannedTIA Project-Server V16

    Currently no fix is planned

  • FixedTIA Multiuser Server V15

    Update to V15.1 Update 8 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109763893/
  • FixedTIA Project-Server

    Update to V1.1 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109810588/
  • FixedTIA Project-Server V17

    Update to V17 Update 6 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109800915/
scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan