FSA-202303 — Festo: Vulnerable Siemens TIA-Portal in multiple Festo Didactic products

Summary

A vulnerability was reported in Siemens TIA Portal. TIA Portal is part of the installation packages of several Festo Didactic products.

TP 260 before June 2023 and MES PC based on DELL XE3 contain a vulnerable versions of TIA Portal V15 to V18.

Affected products of TIA Portal contain a path traversal vulnerability that could allow the creation or overwrite of arbitrary files in the engineering system.

Details

Update TIA-Portal. Please refer to Siemens SSA-116924 for more details.

Vulnerabilities 1

High 7.3

CVE-2023-26293

A vulnerability has been identified in Totally Integrated Automation Portal (TIA Portal) V15 (All versions), Totally In…

Siemens Totally Integrated Automation Portal (TIA Portal) V17 Totally Integrated Automation Portal (TIA Portal) V18 Totally Integrated Automation Portal (TIA Portal) V16 ICS / OT

Apr 11, 2023

Revision history

2025-10-01 #1.0.1
Adjusted to VDE template. Changed title from "Vulnerable Siemens TIA-Portal in several Festo Didactic Products" to "Festo: Vulnerable Siemens TIA-Portal in multiple Festo Didactic products".
2023-10-17 #1.0.0
Initial revision.

References

FSA-202303: Festo: Vulnerable Siemens TIA-Portal in multiple Festo Didactic products - HTML
https://certvde.com/en/advisories/VDE-2023-047/
For further security-related issues in Festo products please contact the Festo Product Security Incident Response Team (PSIRT)
https://festo.com/psirt
CERT@VDE Security Advisories
https://certvde.com/en/advisories/vendor/festo/