ICSA-20-014-05

icsaUScisa_csaf_ot

Siemens TIA Portal (Update F)

view advisory published 2020-01-16

Successful exploitation of this vulnerability could allow a local attacker to execute arbitrary code with SYSTEM privileges.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2019-10934UShigh7.8—
A vulnerability has been identified in TIA Portal V14 (All versions), TIA Portal V15 (All versions < V15.1 Update 7), TIA Portal V16 (All versions < V16 Update 6), TIA Portal V17 (…
02

references

External citations — patches, advisories, analysis.

03

remediations (7)

  • MitigationTIA Portal V14

    Siemens has identified the following specific workarounds and mitigations users can apply to reduce the risk: A partially working fix for Native Language Windows Versions in English or Multilingual User Interface (MUI) Windows Installation was included in TIA Portal Versions v14 SP1 Update 10, v15 SP1 Update 4, v16 Update 1, and v17.

    http://www.siemens.com/cert/advisories
  • MitigationTIA Portal V15

    Siemens has identified the following specific workarounds and mitigations users can apply to reduce the risk: A partially working fix for Native Language Windows Versions in English or Multilingual User Interface (MUI) Windows Installation was included in TIA Portal Versions v14 SP1 Update 10, v15 SP1 Update 4, v16 Update 1, and v17.

    http://www.siemens.com/cert/advisories
  • MitigationTIA Portal V16

    Siemens has identified the following specific workarounds and mitigations users can apply to reduce the risk: A partially working fix for Native Language Windows Versions in English or Multilingual User Interface (MUI) Windows Installation was included in TIA Portal Versions v14 SP1 Update 10, v15 SP1 Update 4, v16 Update 1, and v17.

    http://www.siemens.com/cert/advisories
  • MitigationTIA Portal V17

    Siemens has identified the following specific workarounds and mitigations users can apply to reduce the risk: A partially working fix for Native Language Windows Versions in English or Multilingual User Interface (MUI) Windows Installation was included in TIA Portal Versions v14 SP1 Update 10, v15 SP1 Update 4, v16 Update 1, and v17.

    http://www.siemens.com/cert/advisories
  • FixedTIA Portal V15

    TIA Portal v15: Update to v15.1 Update 7 or later

    https://support.industry.siemens.com/cs/de/de/view/109763890
  • FixedTIA Portal V16

    TIA Portal v16: Update to v16 Update 6 or later

    https://support.industry.siemens.com/cs/ww/en/view/109775861/
  • FixedTIA Portal V17

    TIA Portal v17: Update to v17 Update 4 or later

    https://support.industry.siemens.com/cs/ww/en/view/109784441
scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan