Summary
TIA Administrator creates temporary download files in a directory with insecure permissions. This could allow any authenticated attacker on Windows to disrupt the update process.
Siemens has released a new version for TIA Administrator and recommends to update to the latest version.
Vulnerabilities 1
-
Low 3.3
A vulnerability has been identified in TIA Administrator (All versions < V3 SP2). The affected component creates tempor…
Revision history
-
#1
Publication Date
References
-
SSA-319319: Denial of Service Vulnerability in TIA Administrator - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-319319.html
-
SSA-319319: Denial of Service Vulnerability in TIA Administrator - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-319319.pdf
-
SSA-319319: Denial of Service Vulnerability in TIA Administrator - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-319319.txt