Summary
The latest updates for TIA Portal fix a vulnerability that could allow
a local attacker to execute arbitrary code with SYSTEM privileges.
Update: The previously provided fixes only correctly set the
permissions on English Windows versions. Siemens has released
updates for several affected products and recommends to update to the
latest versions. Siemens recommends specific countermeasures for
products where updates are not, or not yet available.
Vulnerabilities 1
-
Unscored —
A vulnerability has been identified in TIA Portal V14 (All versions), TIA Portal V15 (All versions < V15.1 Update 7), T…
Revision history
-
#7
Added fix for TIA Portal V16
-
#6
Added fix for TIA Portal V17
-
#5
Added solution for TIA Portal V15
-
#4
Errata: Removed solutions: The previously provided fixes only correctly set the permissions on Native Language Windows Versions in English or Multilingual User Interface (MUI) Windows Installations and added TIA Portal V17 as affected product.
-
#3
Added solution for TIA Portal V14
-
#2
Added solution for TIA Portal V16
-
#1
Publication Date
References
-
SSA-629512: Local Privilege Escalation Vulnerability in TIA Portal - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-629512.pdf
-
SSA-629512: Local Privilege Escalation Vulnerability in TIA Portal - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-629512.txt