Approved changes feed: RSS · Atom

cpe:2.3:a:siemens:tia_administrator:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSiemens (4bd2a91b-02ad-5c3d-b25f-70697e0c9d7f)
ProductTia Administrator (231c9451-569d-5306-8fc3-a929de3da196)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-30033 vulnerable 2026-06-08 07:16:58.993223 Details available
HIGH (7.8)
The affected setup component is vulnerable to DLL hijacking. This could allow an attacker to execute arbitrary code when a legitimate user installs an application that uses the affected setup component.
Published: 2025-08-12T11:16:56.565Z
Updated: 2026-03-10T16:07:45.420Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-23365 vulnerable 2026-06-08 07:10:55.581889 Details available
HIGH (7.8)
A vulnerability has been identified in TIA Administrator (All versions < V3.0.6). The affected application allows low-privileged users to trigger installations by overwriting cache files and modifying the downloads path. This would allow an attacker to escalate privilege and exceute arbitrary code.
Published: 2025-07-08T10:34:30.226Z
Updated: 2025-07-08T16:11:49.350Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-23364 vulnerable 2026-06-08 07:10:55.581542 Details available
MEDIUM (6.2)
A vulnerability has been identified in TIA Administrator (All versions < V3.0.6). The affected application improperly validates code signing certificates. This could allow an attacker to bypass the check and exceute arbitrary code during installations.
Published: 2025-07-08T10:34:28.904Z
Updated: 2025-07-08T16:11:54.563Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45386 vulnerable 2026-06-08 06:48:06.017406 Details available
HIGH (8.8)
A vulnerability has been identified in SIMATIC PCS neo V4.0 (All versions), SIMATIC PCS neo V4.1 (All versions < V4.1 Update 2), SIMATIC PCS neo V5.0 (All versions < V5.0 Update 1), SIMOCODE ES V19 (All versions < V19 Update 1), SIRIUS Safety ES V19 (TIA Portal) (All versions < V19 Update 1), SIRIUS Soft Starter ES V19 (TIA Portal) (All versions < V19 Update 1), TIA Administrator (All versions < V3.0.4). Affected products do not correctly invalidate user sessions upon user logout. This could allow a remote unauthenticated attacker, who has obtained the session token by other means, to re-use a legitimate user's session even after logout.
Published: 2025-02-11T10:28:44.675Z
Updated: 2025-02-11T14:38:30.854Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38533 vulnerable 2026-06-08 06:08:18.228295 Details available
LOW (3.3)
A vulnerability has been identified in TIA Administrator (All versions < V3 SP2). The affected component creates temporary download files in a directory with insecure permissions. This could allow any authenticated attacker on Windows to disrupt the update process.
Published: 2024-06-11T11:14:55.951Z
Updated: 2024-08-02T17:46:55.859Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-0778 vulnerable 2026-06-08 05:39:11.179849 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-3712 vulnerable 2026-06-08 05:33:53.756065 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-3449 vulnerable 2026-06-08 05:33:52.201495 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.