VYPR
← All advisories
Medium severity6.7NVD Advisory· Published Feb 14, 2023· Updated Jun 17, 2026

CVE-2022-35868

CVE-2022-35868

Description

A vulnerability has been identified in TIA Multiuser Server V14 (All versions), TIA Multiuser Server V15 (All versions < V15.1 Update 8), TIA Project-Server (All versions < V1.1), TIA Project-Server V16 (All versions), TIA Project-Server V17 (All versions < V17 Update 6). Affected applications contain an untrusted search path vulnerability that could allow an attacker to escalate privileges, when tricking a legitimate user to start the service from an attacker controlled path.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

15
  • Siemens Foundation/Tia Multiuser Server7 versions
    cpe:2.3:a:siemens:tia_multiuser_server:14:*:*:*:*:*:*:*+ 6 more
    • cpe:2.3:a:siemens:tia_multiuser_server:14:*:*:*:*:*:*:*
    • cpe:2.3:a:siemens:tia_multiuser_server:15.1:-:*:*:*:*:*:*
    • cpe:2.3:a:siemens:tia_multiuser_server:15:*:*:*:*:*:*:*
    • cpe:2.3:a:siemens:tia_multiuser_server:16:*:*:*:*:*:*:*
    • (no CPE)
    • (no CPE)range: 0
    • (no CPE)range: All versions < V15.1 Update 8
  • Siemens Foundation/Tia Project Server8 versions
    cpe:2.3:a:siemens:tia_project-server:1.0:*:*:*:*:*:*:*+ 7 more
    • cpe:2.3:a:siemens:tia_project-server:1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:siemens:tia_project-server:17:-:*:*:*:*:*:*
    • cpe:2.3:a:siemens:tia_project-server:17:update1:*:*:*:*:*:*
    • cpe:2.3:a:siemens:tia_project-server:17:update4:*:*:*:*:*:*
    • (no CPE)
    • (no CPE)range: All versions < V1.1
    • (no CPE)range: 0
    • (no CPE)range: All versions < V17 Update 6

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.