CVE-2025-23365 — Siemens / TIA Administrator

CVE-2025-23365

Siemens / TIA Administrator PUBLISHED

Description (CNA)

A vulnerability has been identified in TIA Administrator (All versions < V3.0.6). The affected application allows low-privileged users to trigger installations by overwriting cache files and modifying the downloads path. This would allow an attacker to escalate privilege and exceute arbitrary code.

Affected (CNA)

Vendor / product	Versions
Siemens / TIA Administrator	affected 0 before V3.0.6

CWE

CWE-284

References

https://cert-portal.siemens.com/productcert/html/ssa-573669.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.