Siemens Tia Project-Server vulnerabilities

3 CVEs affecting Siemens Tia Project-Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-30033, published 2025-08-12.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-27127, published 2025-07-08. Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability has been identified in TIA Project-Server (All versions < V2.1.1), TIA Project-Server V17 (All versions), Totally Integrated Automation Portal (TIA Portal) V17 (All versions), Totally…
CVE-2025-30033, published 2025-08-12. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. The affected setup component is vulnerable to DLL hijacking. This could allow an attacker to execute arbitrary code when a legitimate user installs an application that uses the affected setup…
CVE-2022-35868, published 2023-02-14. Medium severity, CVSS 6.7. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability has been identified in TIA Multiuser Server V14 (All versions), TIA Multiuser Server V15 (All versions < V15.1 Update 8), TIA Project-Server (All versions < V1.1), TIA Project-Server…