CVE-2022-35868

highPriorität · verfolgen · 0EPSS 0.002 · 9. PerzentilDEEURUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

0.19% (9th) EPSS

CVSS 7.3 · high

Is it mine?

36 products

Prüfe deine Angriffsfläche

Who says so?

6 sources

cnnvd · enisa_euvd · fstec_bdu · cert_bund

EPSS · bewertet 2026-10-27

A vulnerability has been identified in TIA Multiuser Server V14 (All versions), TIA Multiuser Server V15 (All versions < V15.1 Update 8), TIA Project-Server (All versions < V1.1), TIA Project-Server V16 (All versions), TIA Project-Server V17 (All versions < V17 Update 6). Affected applications contain an untrusted search path vulnerability that could allow an attacker to escalate privileges, when tricking a legitimate user to start the service from an attacker controlled path.

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

BehobenTIA Multiuser Server V15siemens_psirt
Update to V15.1 Update 8 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763893/
BehobenTIA Project-Serversiemens_psirt
Update to V1.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109810588/
BehobenTIA Project-Server V17siemens_psirt
Update to V17 Update 6 or later version
https://support.industry.siemens.com/cs/ww/en/view/109800915/
BehobenTIA Multiuser Server V15cisa_csaf_ot
Update to V15.1 Update 8 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763893/
BehobenTIA Project-Servercisa_csaf_ot
Update to V1.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109810588/
BehobenTIA Project-Server V17cisa_csaf_ot
Update to V17 Update 6 or later version
https://support.industry.siemens.com/cs/ww/en/view/109800915/
MitigationTIA Multiuser Server V14siemens_psirt
Make sure that the directory that is set as working directory when starting the TIA Project-Server or TIA Multiuser Server does not contain untrusted files.
MitigationTIA Multiuser Server V15siemens_psirt
Make sure that the directory that is set as working directory when starting the TIA Project-Server or TIA Multiuser Server does not contain untrusted files.
MitigationTIA Project-Serversiemens_psirt
Make sure that the directory that is set as working directory when starting the TIA Project-Server or TIA Multiuser Server does not contain untrusted files.
MitigationTIA Project-Server V16siemens_psirt
Make sure that the directory that is set as working directory when starting the TIA Project-Server or TIA Multiuser Server does not contain untrusted files.
MitigationTIA Project-Server V17siemens_psirt
Make sure that the directory that is set as working directory when starting the TIA Project-Server or TIA Multiuser Server does not contain untrusted files.
MitigationTIA Multiuser Server V14cisa_csaf_ot
Make sure that the directory that is set as working directory when starting the TIA Project-Server or TIA Multiuser Server does not contain untrusted files.
MitigationTIA Multiuser Server V15cisa_csaf_ot
Make sure that the directory that is set as working directory when starting the TIA Project-Server or TIA Multiuser Server does not contain untrusted files.
MitigationTIA Project-Servercisa_csaf_ot
Make sure that the directory that is set as working directory when starting the TIA Project-Server or TIA Multiuser Server does not contain untrusted files.
MitigationTIA Project-Server V16cisa_csaf_ot
Make sure that the directory that is set as working directory when starting the TIA Project-Server or TIA Multiuser Server does not contain untrusted files.
MitigationTIA Project-Server V17cisa_csaf_ot
Make sure that the directory that is set as working directory when starting the TIA Project-Server or TIA Multiuser Server does not contain untrusted files.
Kein Fix geplantTIA Multiuser Server V14siemens_psirt
Currently no fix is planned
Kein Fix geplantTIA Project-Server V16siemens_psirt
Currently no fix is planned
Kein Fix geplantTIA Multiuser Server V14cisa_csaf_ot
Currently no fix is planned
Kein Fix geplantTIA Project-Server V16cisa_csaf_ot
Currently no fix is planned

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

7.3

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 6.7–7.3

v3.17.3highCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:Hsecondary · NVD / NIST USAusnutzbarkeit 1.3 · Auswirkung 5.9

v3.16.7mediumCVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:Csecondary · CISA US

v3.16.7mediumAV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU

v3.16.7mediumCVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:Csecondary · ENISA EU

v3.16.7mediumCVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:Hsecondary · productcert@siemens.com DEAusnutzbarkeit 0.8 · Auswirkung 5.9

v3.16.7mediumCVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:Csecondary · Siemens ProductCERT DE

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-426USprimärCWE-426USCWE-426USCWE-426US

betroffene Produkte (36)

Betroffene Produkte und Versionsbereiche.

Siemens TIA Portal Multiuser Server < V15.1 Update 8alle Versionencert_bundDEcpe:/a:siemens:tia_portal:multiuser_server__v15.1_update_8
Siemens TIA Portal Multiuser Server V14alle Versionencert_bundDEcpe:/a:siemens:tia_portal:multiuser_server_v14
Siemens TIA Portal Project-Server < V1.1alle Versionencert_bundDEcpe:/a:siemens:tia_portal:project-server__v1.1
Siemens TIA Portal Project-Server V16alle Versionencert_bundDEcpe:/a:siemens:tia_portal:project-server_v16
Siemens TIA Portal Project-Server V17alle Versionencert_bundDEcpe:/a:siemens:tia_portal:project-server_v17
TIA Multiuser Server V14alle Versionencisa_csaf_otUS
TIA Multiuser Server V15alle Versionencisa_csaf_otUS
TIA Project-Serveralle Versionencisa_csaf_otUS
TIA Project-Server V16alle Versionencisa_csaf_otUS
TIA Project-Server V17alle Versionencisa_csaf_otUS
Siemens TIA Multiuser Server V14≤ vers:all/*cisa_csaf_otUS
Siemens TIA Multiuser Server V15< V15.1_Update_8cisa_csaf_otUS
Siemens TIA Project-Server< V1.1cisa_csaf_otUS
Siemens TIA Project-Server V16≤ vers:all/*cisa_csaf_otUS
Siemens TIA Project-Server V17< V17_Update_6cisa_csaf_otUS
Siemens TIA Multiuser Server V140 → *enisa_euvdEU
Siemens TIA Multiuser Server V15All versions → V15.1 Update 8enisa_euvdEU
Siemens TIA Project-ServerAll versions → V1.1enisa_euvdEU
Siemens TIA Project-Server V160 → *enisa_euvdEU
Siemens TIA Project-Server V17All versions → V17 Update 6enisa_euvdEU

20 von 36 angezeigt

Advisories (3)

Hersteller- und Ökosystem-Meldungen dazu.

SSA-640968SSA-640968: Untrusted Search Path Vulnerability in TIA Project-Server formerly known as TIA Multiuser Server2023-02-14csaf · siemens_psirtDE
TIA Project-Server formerly known as TIA Multiuser Server contains an untrusted search path vulnerability that could allow an attacker to escalate privileges, when tricking a legitimate user to start the service from an attacker controlled path. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens is preparing further updates and recommends specific countermeasures for products where updates are not, or not yet available.
WID-SEC-W-2023-0357Siemens TIA Portal: Schwachstelle ermöglicht PrivilegieneskalationDeutsch2023-02-13csaf · cert_bundDE
Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Siemens TIA Portal ausnutzen, um seine Privilegien zu erhöhen.
ICSA-23-047-07Siemens TIA Project-Server formerly known as TIA Multiuser Server2023-02-14icsa · cisa_csaf_otUS
TIA Project-Server formerly known as TIA Multiuser Server contains an untrusted search path vulnerability that could allow an attacker to escalate privileges, when tricking a legitimate user to start the service from an attacker controlled path. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens is preparing further updates and recommends specific countermeasures for products where updates are not, or not yet available.

auch bekannt als (6)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd fstec_bdu cert_bund cisa_csaf_ot siemens_psirt NVD CVE.org MITRE

veröffentlicht 2023-02-14geändert 2026-06-17

verwandt (1,305)

Verwandte Einträge.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2022-23748US	high7.8OT kritisch	8.33% (95th)	KEV	2022-11-17
mDNSResponder.exe is vulnerable to DLL Sideloading attack. Executable improperly specifies how to load the DLL, from which folder and under what conditions. In these scenarios, a m…
CVE-2022-22047US	high7.2OT kritisch	18.8% (97th)	KEV	2022-07-12
Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
CVE-2012-1854US	medium6.9OT kritisch	20.9% (98th)	KEV	2012-07-10
Untrusted search path vulnerability in VBE6.dll in Microsoft Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Microsoft Visual Basic for Applications (VBA); and Summit Mic…
CVE-2023-38408US	critical9.8	79.7% (100th)	Exploit	2023-07-20
The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code execution if an agent is forwarded to an attacker-con…
CVE-2015-0096US	high9.3	71.0% (99th)	Exploit	2015-03-11
Untrusted search path vulnerability in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Serv…

+1300 weitere

Referenzen (9)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan