TIA Portal vulnerabilities

2 known vulnerabilities in TIA Portal from Siemens. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  Totally Integrated Automation Portal (TIA…: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2023-26293Apr 11, 2023Siemens

  A vulnerability has been identified in Totally Integrated Automation Portal (TIA Portal) V15 (All versions), Totally Integrated Automation Portal (TIA Portal) V16 (All versions < V16 Update 7), Totally Integrated Automation Portal (TIA Portal) V17 (All version

• 7.5 High severity

  SIMATIC PCS neo (Administration Console): Uncontrolled Resource Consumption

  CVE-2022-27194Apr 12, 2022SiemensEPSS 1.43%

  A vulnerability has been identified in SIMATIC PCS neo (Administration Console) (All versions < V3.1 SP1), SINETPLAN (All versions), TIA Portal (V15, V15.1, V16 and V17). The affected system cannot properly process specially crafted packets sent to port 8888/t