Totally Integrated Automation Portal vulnerabilities

9 known vulnerabilities in Totally Integrated Automation Portal from Siemens. 9 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

9vulnerabilities

1critical

8high

0exploited

7.9average CVSS score

Latest first

7.5 High severity
SIMATIC PCS neo V4.1: Out-of-bounds Read
CVE-2025-30176May 13, 2025Siemens
A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SINEC NMS (All versions < V4.0), SINEMA Remote Connect (All versions), Totally Integrated Automation Portal (TIA Portal) V17 (All versions), Totall
7.5 High severity
SIMATIC PCS neo V4.1: Out-of-bounds Write
CVE-2025-30175May 13, 2025Siemens
A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SINEC NMS (All versions < V4.0), SINEMA Remote Connect (All versions), Totally Integrated Automation Portal (TIA Portal) V17 (All versions), Totall
7.5 High severity
SIMATIC PCS neo V4.1: Out-of-bounds Read
CVE-2025-30174May 13, 2025Siemens
A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SINEC NMS (All versions < V4.0), SINEMA Remote Connect (All versions), Totally Integrated Automation Portal (TIA Portal) V17 (All versions), Totall
9.8 Critical severity
Opcenter Quality: Heap-based Buffer Overflow
CVE-2024-33698Sep 10, 2024SiemensEPSS 1.06%
A vulnerability has been identified in Opcenter Quality (All versions < V2406), Opcenter RDnL (All versions < V2410), SIMATIC PCS neo V4.0 (All versions), SIMATIC PCS neo V4.1 (All versions < V4.1 Update 2), SIMATIC PCS neo V5.0 (All versions < V5.0 Update 1),
7.5 High severity
A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407)…
CVE-2023-46285Dec 12, 2023Siemens
A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All versions < V2312), SIMATIC PCS neo (All versions < V4.1), SINEC NMS (All versions < V2.0 SP1), Totally Integrated Automation Portal (TIA Portal)
7.5 High severity
Opcenter Execution Foundation: Out-of-bounds Write
CVE-2023-46284Dec 12, 2023Siemens
A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All versions < V2312), SIMATIC PCS neo (All versions < V4.1), SINEC NMS (All versions < V2.0 SP1), Totally Integrated Automation Portal (TIA Portal)
7.5 High severity
Opcenter Execution Foundation: Buffer Copy without Checking Size of Input
CVE-2023-46283Dec 12, 2023Siemens
A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All versions < V2312), SIMATIC PCS neo (All versions < V4.1), SINEC NMS (All versions < V2.0 SP1), Totally Integrated Automation Portal (TIA Portal)
8.8 High severity
Opcenter Execution Foundation: Permissive Cross-domain Security Policy with Untrusted Domains
CVE-2023-46281Dec 12, 2023Siemens
A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All versions < V2312), SIMATIC PCS neo (All versions < V4.1), SINEC NMS (All versions < V2.0 SP1), Totally Integrated Automation Portal (TIA Portal)
7.5 High severity
SIMATIC PCS neo (Administration Console): Uncontrolled Resource Consumption
CVE-2022-27194Apr 12, 2022SiemensEPSS 1.43%
A vulnerability has been identified in SIMATIC PCS neo (Administration Console) (All versions < V3.1 SP1), SINETPLAN (All versions), TIA Portal (V15, V15.1, V16 and V17). The affected system cannot properly process specially crafted packets sent to port 8888/t