Description
Siemens SIMATIC STEP 7 (TIA Portal) before 13 SP1 determines a user's privileges on the basis of project-file fields that lack integrity protection, which allows remote attackers to establish arbitrary authorization data via a modified file.
Advisories 1
- ICSA-15-048-01 Siemens SIMATIC STEP 7 TIA Portal Vulnerabilities CISA ICS & IT advisories · Jun 6, 2025