ICSA-20-014-05

icsaUScisa_csaf_ot

Siemens TIA Portal (Update F)

Advisory ansehen veröffentlicht 2020-01-16

Successful exploitation of this vulnerability could allow a local attacker to execute arbitrary code with SYSTEM privileges.

01

beschreibt (1)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2019-10934UShigh7.8—
A vulnerability has been identified in TIA Portal V14 (All versions), TIA Portal V15 (All versions < V15.1 Update 7), TIA Portal V16 (All versions < V16 Update 6), TIA Portal V17 (…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (7)

  • MitigationTIA Portal V14

    Siemens has identified the following specific workarounds and mitigations users can apply to reduce the risk: A partially working fix for Native Language Windows Versions in English or Multilingual User Interface (MUI) Windows Installation was included in TIA Portal Versions v14 SP1 Update 10, v15 SP1 Update 4, v16 Update 1, and v17.

    http://www.siemens.com/cert/advisories
  • MitigationTIA Portal V15

    Siemens has identified the following specific workarounds and mitigations users can apply to reduce the risk: A partially working fix for Native Language Windows Versions in English or Multilingual User Interface (MUI) Windows Installation was included in TIA Portal Versions v14 SP1 Update 10, v15 SP1 Update 4, v16 Update 1, and v17.

    http://www.siemens.com/cert/advisories
  • MitigationTIA Portal V16

    Siemens has identified the following specific workarounds and mitigations users can apply to reduce the risk: A partially working fix for Native Language Windows Versions in English or Multilingual User Interface (MUI) Windows Installation was included in TIA Portal Versions v14 SP1 Update 10, v15 SP1 Update 4, v16 Update 1, and v17.

    http://www.siemens.com/cert/advisories
  • MitigationTIA Portal V17

    Siemens has identified the following specific workarounds and mitigations users can apply to reduce the risk: A partially working fix for Native Language Windows Versions in English or Multilingual User Interface (MUI) Windows Installation was included in TIA Portal Versions v14 SP1 Update 10, v15 SP1 Update 4, v16 Update 1, and v17.

    http://www.siemens.com/cert/advisories
  • BehobenTIA Portal V15

    TIA Portal v15: Update to v15.1 Update 7 or later

    https://support.industry.siemens.com/cs/de/de/view/109763890
  • BehobenTIA Portal V16

    TIA Portal v16: Update to v16 Update 6 or later

    https://support.industry.siemens.com/cs/ww/en/view/109775861/
  • BehobenTIA Portal V17

    TIA Portal v17: Update to v17 Update 4 or later

    https://support.industry.siemens.com/cs/ww/en/view/109784441
scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan