Summary
The know-how protection feature in Totally Integrated Automation Portal (TIA Portal) does not properly update the encryption of existing program blocks when a project file is updated. This could allow attackers with access to the project file to recover previous - yet unprotected - versions of the project without the knowledge of the know-how protection password.
Siemens recommends specific countermeasures for products where fixes are not, or not yet available.
Vulnerabilities 1
-
Medium 6.2
A vulnerability has been identified in Totally Integrated Automation Portal (TIA Portal) V14 (All versions), Totally In…
Revision history
-
#3
No fix planned for Totally Integrated Automation Portal (TIA Portal) V19; Added Totally Integrated Automation Portal (TIA Portal) V20 as affected product
-
#2
Added Totally Integrated Automation Portal (TIA Portal) V19 as affected product
-
#1
Publication Date
References
-
SSA-042050: Know-How Protection Mechanism Failure in TIA Portal - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-042050.html