PT-2025-28389 · Unknown · Tia Administrator

Published 2025-07-08 · Updated 2025-07-08 · CVE-2025-23364

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: TIA Administrator versions prior to 3.0.6

Description: A vulnerability has been identified in the affected application, where it improperly validates code signing certificates. This could allow an attacker to bypass the check and execute arbitrary code during installations.

Recommendations: For versions prior to 3.0.6, update to version 3.0.6 or later to resolve the issue. As a temporary workaround, consider restricting the installation of applications to trusted sources until the update is applied.

Fix

Improper Verification of Cryptographic Signature

Weakness Enumeration

CWE-347

Related Identifiers

BDU:2026-00187

CVE-2025-23364

Affected Products

Tia Administrator

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-23364 · Security Note
• https://cert-portal.siemens.com/productcert/html/ssa-573669.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-00187 · Security Note
• https://osv.dev/vulnerability/CVE-2025-23364 · Vendor Advisory
• https://twitter.com/CVEnew/status/1942535958001553790 · Twitter Post