Description
Siemens SIMATIC STEP 7 (TIA Portal) 12 and 13 before 13 SP1 Upd1 improperly stores password data within project files, which makes it easier for local users to determine cleartext (1) protection-level passwords or (2) web-server passwords by leveraging the ability to read these files.
Advisories 1
- ICSA-15-050-01A Siemens SIMATIC STEP 7 TIA Portal Vulnerabilities (Update A) CISA ICS & IT advisories · Jun 6, 2025