SSA-629512

csafDEsiemens_psirt

SSA-629512: Local Privilege Escalation Vulnerability in TIA Portal

view advisory published 2020-01-14

The latest updates for TIA Portal fix a vulnerability that could allow a local attacker to execute arbitrary code with SYSTEM privileges. Update: The previously provided fixes only correctly set the permissions on English Windows versions. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where updates are not, or not yet available.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2019-10934UShigh7.8—
A vulnerability has been identified in TIA Portal V14 (All versions), TIA Portal V15 (All versions < V15.1 Update 7), TIA Portal V16 (All versions < V16 Update 6), TIA Portal V17 (…
02

references

External citations — patches, advisories, analysis.

03

remediations (12)

  • MitigationTIA Portal V14

    Remove write permissions for every non-administrative user on files and folders located below the "TraceEngine" folder (usually located at "C:\ProgramData\Siemens\Automation")

  • MitigationTIA Portal V15

    Remove write permissions for every non-administrative user on files and folders located below the "TraceEngine" folder (usually located at "C:\ProgramData\Siemens\Automation")

  • MitigationTIA Portal V16

    Remove write permissions for every non-administrative user on files and folders located below the "TraceEngine" folder (usually located at "C:\ProgramData\Siemens\Automation")

  • MitigationTIA Portal V17

    Remove write permissions for every non-administrative user on files and folders located below the "TraceEngine" folder (usually located at "C:\ProgramData\Siemens\Automation")

  • No fix plannedTIA Portal V14

    Currently no fix is planned

  • FixedTIA Portal V15

    Update to V15.1 Update 7 or later version

    https://support.industry.siemens.com/cs/de/de/view/109763890/
  • FixedTIA Portal V16

    Update to V16 Update 6 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109775861/
  • FixedTIA Portal V17

    Update to V17 Update 4 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109784441/
  • WorkaroundTIA Portal V14

    A partially working fix for Native Language Windows Versions in English or Multilingual User Interface (MUI) Windows Installation was included in TIA Portal Versions V14 SP1 Update 10, V15 SP1 Update 4,V16 Update 1 and V17

  • WorkaroundTIA Portal V15

    A partially working fix for Native Language Windows Versions in English or Multilingual User Interface (MUI) Windows Installation was included in TIA Portal Versions V14 SP1 Update 10, V15 SP1 Update 4,V16 Update 1 and V17

  • WorkaroundTIA Portal V16

    A partially working fix for Native Language Windows Versions in English or Multilingual User Interface (MUI) Windows Installation was included in TIA Portal Versions V14 SP1 Update 10, V15 SP1 Update 4,V16 Update 1 and V17

  • WorkaroundTIA Portal V17

    A partially working fix for Native Language Windows Versions in English or Multilingual User Interface (MUI) Windows Installation was included in TIA Portal Versions V14 SP1 Update 10, V15 SP1 Update 4,V16 Update 1 and V17

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan