Yüksek CVSS 7.3
CVE-2023-26293: Tia Portal: hatalı girdi doğrulama
Açıklama (NVD)
A vulnerability has been identified in Totally Integrated Automation Portal (TIA Portal) V15 (All versions), Totally Integrated Automation Portal (TIA Portal) V16 (All versions < V16 Update 7), Totally Integrated Automation Portal (TIA Portal) V17 (All versions < V17 Update 6), Totally Integrated Automation Portal (TIA Portal) V18 (All versions < V18 Update 1). Affected products contain a path traversal vulnerability that could allow the creation or overwrite of arbitrary files in the engineering system. If the user is tricked to open a malicious PC system configuration file, an attacker could exploit this vulnerability to achieve arbitrary code execution.
Özet bilgiler
- Ürün
- Siemens Tia Portal
- CVSS v3.1
- 7.3
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L - EPSS
- %0,25 (yüzdelik 16)
- CWE
- CWE-20
- Yama
- Mevcut
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| siemens-tia-portal | 15 | 15 | — |
| siemens-tia-portal | 16 | 16 | — |
| siemens-tia-portal | 17 | 17 | — |
| siemens-tia-portal | 17 | 17 | — |
| siemens-tia-portal | 17 | 17 | — |
| siemens-tia-portal | 17 | 17 | — |
| siemens-tia-portal | 17 | 17 | — |
| siemens-tia-portal | 17 | 17 | — |
| siemens-tia-portal | 18 | 18 | — |