CVE-2022-35868

Siemens TIA Project-Server and TIA Multiuser Server are affected by an untrusted search path vulnerability (CWE-426) that could allow local privilege escalation when a user starts the service from an attacker-controlled path. Affected: TIA Multiuser Server V14 (all), TIA Multiuser Server V15 befo...

Siemens TIA Project-Server formerly known as TIA Multiuser Server

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please seeSiemens' ProductCERT Security Advisories CERT Services | Services |...