Summary
TIA Portal contains a path traversal vulnerability that could allow the creation or overwrite of arbitrary files in the engineering system. If the user is tricked to open a malicious PC system configuration file, an attacker could exploit this vulnerability to achieve arbitrary code execution.
Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.
Vulnerabilities 1
-
High 7.3
A vulnerability has been identified in Totally Integrated Automation Portal (TIA Portal) V15 (All versions), Totally In…
Revision history
-
#3
Added fix for Totally Integrated Automation Portal (TIA Portal) V16
-
#2
Added fix for Totally Integrated Automation Portal (TIA Portal) V17
-
#1
Publication Date
References
-
SSA-116924: Path Traversal Vulnerability in TIA Portal - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-116924.html