A vulnerability has been identified in TIA Multiuser Server V14 (All versions), TIA Multiuser Server V15 (All versions < V15.1 Update 8), TIA Project-Server (All versions < V1.1), TIA Project-Server V16 (All versions), TIA Project-Server V17 (All versions < V17 Update 6). Affected applications contain an untrusted search path vulnerability that could allow an attacker to escalate privileges, when tricking a legitimate user to start the service from an attacker controlled path.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
TIA Multiuser Server V14
Vendor
Siemens
Product
TIA Multiuser Server V14
Platforms
Unknown
Default status
unknown
TIA Multiuser Server V14 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
*
Unavailable
None listed
TIA Multiuser Server V15
Vendor
Siemens
Product
TIA Multiuser Server V15
Platforms
Unknown
Default status
unknown
TIA Multiuser Server V15 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All versions < V15.1 Update 8
affected
Unavailable
Unavailable
Unavailable
None listed
TIA Project-Server
Vendor
Siemens
Product
TIA Project-Server
Platforms
Unknown
Default status
unknown
TIA Project-Server · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All versions < V1.1
affected
Unavailable
Unavailable
Unavailable
None listed
TIA Project-Server V16
Vendor
Siemens
Product
TIA Project-Server V16
Platforms
Unknown
Default status
unknown
TIA Project-Server V16 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
*
Unavailable
None listed
TIA Project-Server V17
Vendor
Siemens
Product
TIA Project-Server V17
Platforms
Unknown
Default status
unknown
TIA Project-Server V17 · Scoped product and version facts