Totally Integrated Automation Portal (TIA Portal) V16 vulnerabilities

7 known vulnerabilities in Totally Integrated Automation Portal (TIA Portal) V16 from Siemens. 7 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Opcenter Execution Foundation: Heap-based Buffer Overflow

  CVE-2024-49775Dec 16, 2024SiemensEPSS 1.51%

  A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2501.0001), Opcenter Intelligence (All versions < V2501.0001), Opcenter Quality (All versions < V2512), Opcenter RDnL (All versions < V2410), SIMATIC PCS neo V4.0 (All versio

• 9.8 Critical severity

  Opcenter Quality: Heap-based Buffer Overflow

  CVE-2024-33698Sep 10, 2024SiemensEPSS 1.06%

  A vulnerability has been identified in Opcenter Quality (All versions < V2406), Opcenter RDnL (All versions < V2410), SIMATIC PCS neo V4.0 (All versions), SIMATIC PCS neo V4.1 (All versions < V4.1 Update 2), SIMATIC PCS neo V5.0 (All versions < V5.0 Update 1),

• 7.5 High severity

  A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407)…

  CVE-2023-46285Dec 12, 2023Siemens

  A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All versions < V2312), SIMATIC PCS neo (All versions < V4.1), SINEC NMS (All versions < V2.0 SP1), Totally Integrated Automation Portal (TIA Portal)

• 7.5 High severity

  Opcenter Execution Foundation: Out-of-bounds Write

  CVE-2023-46284Dec 12, 2023Siemens

  A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All versions < V2312), SIMATIC PCS neo (All versions < V4.1), SINEC NMS (All versions < V2.0 SP1), Totally Integrated Automation Portal (TIA Portal)

• 7.5 High severity

  Opcenter Execution Foundation: Buffer Copy without Checking Size of Input

  CVE-2023-46283Dec 12, 2023Siemens

  A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All versions < V2312), SIMATIC PCS neo (All versions < V4.1), SINEC NMS (All versions < V2.0 SP1), Totally Integrated Automation Portal (TIA Portal)

• 8.8 High severity

  Opcenter Execution Foundation: Permissive Cross-domain Security Policy with Untrusted Domains

  CVE-2023-46281Dec 12, 2023Siemens

  A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All versions < V2312), SIMATIC PCS neo (All versions < V4.1), SINEC NMS (All versions < V2.0 SP1), Totally Integrated Automation Portal (TIA Portal)

• 7.8 High severity

  Totally Integrated Automation Portal (TIA…: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2023-26293Apr 11, 2023Siemens

  A vulnerability has been identified in Totally Integrated Automation Portal (TIA Portal) V15 (All versions), Totally Integrated Automation Portal (TIA Portal) V16 (All versions < V16 Update 7), Totally Integrated Automation Portal (TIA Portal) V17 (All version