Siemens Mendix Forgot Password Module
Successful exploitation of the vulnerability could allow an attacker to retrieve sensitive information.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-26293US | — | — | ||
A vulnerability has been identified in Totally Integrated Automation Portal (TIA Portal) V15 (All versions), Totally Integrated Automation Portal (TIA Portal) V16 (All versions < V… | ||||
references
External citations — patches, advisories, analysis.
- SSA-116924: Path Traversal Vulnerability in TIA Portal - CSAF Versionexternal
- SSA-116924: Path Traversal Vulnerability in TIA Portal - HTML Versionexternal
- SSA-116924: Path Traversal Vulnerability in TIA Portal - PDF Versionexternal
- SSA-116924: Path Traversal Vulnerability in TIA Portal - TXT Versionexternal
- Recommended Practicesexternal
- ICS Advisory ICSA-23-103-08 JSONself
- ICS Advisory ICSA-23-103-08 Web Versionself
- Recommended Practicesexternal
remediations (8)
- MitigationTotally Integrated Automation Portal (TIA Portal) V15
As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity
- MitigationTotally Integrated Automation Portal (TIA Portal) V16
As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity
- MitigationTotally Integrated Automation Portal (TIA Portal) V17
As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity
- MitigationTotally Integrated Automation Portal (TIA Portal) V18
As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity
- No fix plannedTotally Integrated Automation Portal (TIA Portal) V15
Currently no fix is planned
- No fix availableTotally Integrated Automation Portal (TIA Portal) V16
Currently no fix is available
- FixedTotally Integrated Automation Portal (TIA Portal) V17
Update to V17 Update 6 or later version
https://support.industry.siemens.com/cs/ww/en/view/109784441/ - FixedTotally Integrated Automation Portal (TIA Portal) V18
Update to V18 Update 1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817218/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan