Description
A vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) (All versions < V19). An information disclosure vulnerability could allow a local attacker to gain access to the access level password of the SIMATIC S7-1200 and S7-1500 CPUs, when entered by a legitimate user in the hardware configuration of the affected application.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | SIMATIC STEP 7 (TIA Portal) | All versions < V19 | — |
Advisories 3
- WID-SEC-2023-3134 Siemens SIMATIC STEP 7: Schwachstelle ermöglicht Offenlegung von Informationen BSI CERT-Bund (WID) · Dec 12, 2023
- ICSA-23-348-07 Siemens SIMATIC STEP 7 (TIA Portal) CISA ICS & IT advisories · Dec 12, 2023
- SSA-887801 SSA-887801: Information Disclosure Vulnerability in SIMATIC STEP 7 (TIA Portal) Siemens ProductCERT · Dec 12, 2023