CVE-2025-23365

8.5 highEPSS 0.1%

High (8.5) in siemens tia administrator. EPSS 0.1% chance of exploitation in the next 30 days.

A vulnerability has been identified in TIA Administrator (All versions < V3.0.6). The affected application allows low-privileged users to trigger installations by overwriting cache files and modifying the downloads path. This would allow an attacker to escalate privilege and exceute arbitrary code.

Severity

CVSS 4.0

8.5 high

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.1% chance of exploitation in the next 30 days; higher than 3% of CVEs (scores of 2026-10-31)
CWE: CWE-284
Published: 2025-07-08
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

siemens:tia_administrator

References

https://cert-portal.siemens.com/productcert/html/ssa-573669.html

Check your stack JSON