CVE-2023-26293 Information

Description

A vulnerability has been identified in TIA Portal V15 (All versions) TIA Portal V16 (All versions) TIA Portal V17 (All versions) TIA Portal V18 (All versions < V18 Update 1). Affected products contain a path traversal vulnerability that could allow the creation or overwrite of arbitrary files in the engineering system. If the user is tricked to open a malicious PC system configuration file an attacker could exploit this vulnerability to achieve arbitrary code execution.

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L

Reference

https://cert-portal.siemens.com/productcert/pdf/ssa-116924.pdf

Attack Complexity

LOW

Privileges Required

NONE

User Interaction Required

NONE

Scope

REQUIRED

Confidentiality Impact

UNCHANGED

Integrity Impact

HIGH

Availability Impact

HIGH

Base Score

LOW

Base Severity

7.3