CVE-2022-35868: Siemens Tia Multiuser Server

Medium severity, CVSS 6.7. EPSS: 0.2% chance of exploitation in the next 30 days.

A vulnerability has been identified in TIA Multiuser Server V14 (All versions), TIA Multiuser Server V15 (All versions < V15.1 Update 8), TIA Project-Server (All versions < V1.1), TIA Project-Server V16 (All versions), TIA Project-Server V17 (All versions < V17 Update 6). Affected applications contain an untrusted search path vulnerability that could allow an attacker to escalate privileges, when tricking a legitimate user to start the service from an attacker controlled path.

Affected products

• Siemens Tia Multiuser Server: version 14 only; version 15 only; version 15.1 only; version 16 only
• Siemens Tia Project-Server: version 1.0 only; version 17 only

Published 2023-02-14. Last modified 2026-06-17.