Description
A vulnerability has been identified in TIA Administrator (All versions < V3 SP2). The affected component creates temporary download files in a directory with insecure permissions. This could allow any authenticated attacker on Windows to disrupt the update process.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | TIA Administrator | < V3 SP2 | V3 SP2 |
Advisories 3
- NCSC-2024-0246 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Jun 11, 2024
- ICSA-24-165-03 Siemens TIA Administrator CISA ICS & IT advisories · Jun 11, 2024
- SSA-319319 SSA-319319: Denial of Service Vulnerability in TIA Administrator Siemens ProductCERT · Jun 11, 2024