Siemens TIA Administrator Privilege Escalation and Arbitrary Code Execution Vulnerability

A vulnerability exists in Siemens TIA Administrator versions prior to 3.0.6, allowing low-privileged users to overwrite cache files and alter the download path. This manipulation could lead to unauthorized privilege escalation and the execution of arbitrary code.

Impact

Exploitation of this vulnerability could result in unauthorized privilege escalation and the execution of arbitrary code within the application.

Remediation

Users are advised to update TIA Administrator to version 3.0.6 or later. For more information, visit the Siemens Industry Support page.