ICSA-25-191-05

Siemens TIA Project-Server and TIA Portal

view advisory published 2025-07-08

A vulnerability in TIA Project Server and TIA Portal could allow an attacker to cause a denial of service condition. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends countermeasures for products where fixes are not, or not yet available.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2025-27127US	—	0.33% (25th)	—	2025-07-08
A vulnerability has been identified in TIA Project-Server (All versions < V2.1.1), TIA Project-Server V17 (All versions), Totally Integrated Automation Portal (TIA Portal) V17 (All…

references

External citations — patches, advisories, analysis.

remediations (6)

No fix plannedTIA Project-Server V17
Currently no fix is planned
No fix plannedTotally Integrated Automation Portal (TIA Portal) V17
Currently no fix is planned
No fix plannedTotally Integrated Automation Portal (TIA Portal) V18
Currently no fix is planned
FixedTIA Project-Server
Update to V2.1.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109810588/
FixedTotally Integrated Automation Portal (TIA Portal) V19
Update to V19 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109925643/
FixedTotally Integrated Automation Portal (TIA Portal) V20
Update to V20 Update 3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109963851/

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan