Description
A vulnerability has been identified in TIA Multiuser Server V14 (All versions), TIA Multiuser Server V15 (All versions < V15.1 Update 8), TIA Project-Server (All versions < V1.1), TIA Project-Server V16 (All versions), TIA Project-Server V17 (All versions < V17 Update 6). Affected applications contain an untrusted search path vulnerability that could allow an attacker to escalate privileges, when tricking a legitimate user to start the service from an attacker controlled path.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Siemens TIA Multiuser Server V14
Default version status: unknown
0 to < *affected
Siemens TIA Multiuser Server V15
Default version status: unknown
All versions < V15.1 Update 8affected
Siemens TIA Project-Server
Default version status: unknown
All versions < V1.1affected
Siemens TIA Project-Server V16
Default version status: unknown
0 to < *affected
Siemens TIA Project-Server V17
Default version status: unknown
All versions < V17 Update 6affected