Read the docs
TI-2022-16299 Aliases CVE-2022-35868GHSA-5qx2-5w4h-wgr8

Untrusted search path in Siemens TIA Multiuser Server V14

Priority LOW 31CWE-426Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
Required
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-426.

Summary

A vulnerability has been identified in TIA Multiuser Server V14 (All versions), TIA Multiuser Server V15 (All versions < V15.1 Update 8), TIA Project-Server (All versions < V1.1), TIA Project-Server V16 (All versions), TIA Project-Server V17 (All versions < V17 Update 6). Affected applications contain an untrusted search path vulnerability that could allow an attacker to escalate privileges, when tricking a legitimate user to start the service from an attacker controlled path.

Why it matters now

EPSS 0.00192 8th percentileScored 2026-11-07
Fix Fixed TIA Project-Server (Siemens): V1.1

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
SiemensTIA Multiuser Server V14all versions—No fix listedCNA
SiemensTIA Multiuser Server V15All versions < V15.1 Update 8—No fix listedCNA
SiemensTIA Project-Serverbefore V1.1V1.1Patch availableCNA
SiemensTIA Project-Server V16all versions—No fix listedCNA
SiemensTIA Project-Server V17All versions < V17 Update 6—No fix listedCNA
  • TIA Multiuser Server V14 VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • TIA Multiuser Server V15 VendorSiemens Affected All versions < V15.1 Update 8 Fixed in — No fix listed CNA
  • TIA Project-Server VendorSiemens Affected before V1.1 Fixed in V1.1 Patch available CNA
  • TIA Project-Server V16 VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • TIA Project-Server V17 VendorSiemens Affected All versions < V17 Update 6 Fixed in — No fix listed CNA

CPE configurations NVD · 8

CPEVersionsRoleVendor
cpe:2.3:a:siemens:tia_multiuser_server:14:*:*:*:*:*:*:*14VulnerableSiemens
cpe:2.3:a:siemens:tia_multiuser_server:15:*:*:*:*:*:*:*15VulnerableSiemens
cpe:2.3:a:siemens:tia_multiuser_server:15.1:-:*:*:*:*:*:*15.1VulnerableSiemens
cpe:2.3:a:siemens:tia_multiuser_server:16:*:*:*:*:*:*:*16VulnerableSiemens
cpe:2.3:a:siemens:tia_project-server:1.0:*:*:*:*:*:*:*1.0VulnerableSiemens
cpe:2.3:a:siemens:tia_project-server:17:-:*:*:*:*:*:*17VulnerableSiemens
cpe:2.3:a:siemens:tia_project-server:17:update1:*:*:*:*:*:*17 update1VulnerableSiemens
cpe:2.3:a:siemens:tia_project-server:17:update4:*:*:*:*:*:*17 update4VulnerableSiemens
  • cpe:2.3:a:siemens:tia_multiuser_server:14:*:*:*:*:*:*:* Versions 14 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:tia_multiuser_server:15:*:*:*:*:*:*:* Versions 15 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:tia_multiuser_server:15.1:-:*:*:*:*:*:* Versions 15.1 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:tia_multiuser_server:16:*:*:*:*:*:*:* Versions 16 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:tia_project-server:1.0:*:*:*:*:*:*:* Versions 1.0 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:tia_project-server:17:-:*:*:*:*:*:* Versions 17 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:tia_project-server:17:update1:*:*:*:*:*:* Versions 17 update1 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:tia_project-server:17:update4:*:*:*:*:*:* Versions 17 update4 Vulnerable ·Siemens

Remediation

  • Fix · CNA TIA Project-Server (Siemens) Fixed in V1.1

Timeline

  1. 2026-10-02 Threatist record created from CVE-2022-35868
  2. 2026-10-03 Alias added: GHSA-5qx2-5w4h-wgr8

References

Advisory 1

Other 1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences