Medium WID-SEC-2023-3100 5 CVEs

Siemens TIA Portal: Mehrere Schwachstellen

Published Dec 11, 2023 · Updated Dec 11, 2023 · de-DE

Vendor: Siemens Product: TIA Portal Product: TIA Portal < V18 update 3 Product: TIA Portal V14 Product: TIA Portal V15.1 Product: TIA Portal V16 Product: TIA Portal V17 Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in Siemens TIA Portal ausnutzen, um ein unerwünschtes Verhalten auszulösen, einen Cross Site Scripting Angriff durchzuführen oder einen Denial of Service zu verursachen.

Product

TIA-Portal ist ein Automatisierungsframework für Steuerungen und andere Automatisierungsgeräte der SIMATIC-Serie.

Vulnerabilities 5

High 7.5

CVE-2023-46283

A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All vers…

Siemens SINEC NMS Totally Integrated Automation Portal (TIA Portal) V17 Totally Integrated Automation Portal (TIA Portal) V18 ICS / OT

Dec 12, 2023
High 7.5

CVE-2023-46284

A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All vers…

Siemens SINEC NMS Totally Integrated Automation Portal (TIA Portal) V18 Totally Integrated Automation Portal (TIA Portal) V17 ICS / OT

Dec 12, 2023
High 7.5

CVE-2023-46285

A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All vers…

Siemens SINEC NMS Totally Integrated Automation Portal (TIA Portal) V17 Totally Integrated Automation Portal (TIA Portal) V18 ICS / OT

Dec 12, 2023
High 7.1

CVE-2023-46281

A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All vers…

Siemens SINEC NMS Totally Integrated Automation Portal (TIA Portal) V18 Totally Integrated Automation Portal (TIA Portal) V17 ICS / OT

Dec 12, 2023
High 7.1

CVE-2023-46282

A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All vers…

Siemens SINEC NMS Totally Integrated Automation Portal (TIA Portal) V17 Totally Integrated Automation Portal (TIA Portal) V18 ICS / OT

Dec 12, 2023

Revision history

2023-12-11 #1
Initiale Fassung

References

Siemens Security Advisory by Siemens ProductCERT vom 2023-12-11
https://cert-portal.siemens.com/productcert/html/ssa-999588.html