SSA-629512

csafDEsiemens_psirt

SSA-629512: Local Privilege Escalation Vulnerability in TIA Portal

Advisory ansehen veröffentlicht 2020-01-14

The latest updates for TIA Portal fix a vulnerability that could allow a local attacker to execute arbitrary code with SYSTEM privileges. Update: The previously provided fixes only correctly set the permissions on English Windows versions. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where updates are not, or not yet available.

01

beschreibt (1)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2019-10934UShigh7.8—
A vulnerability has been identified in TIA Portal V14 (All versions), TIA Portal V15 (All versions < V15.1 Update 7), TIA Portal V16 (All versions < V16 Update 6), TIA Portal V17 (…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (12)

  • MitigationTIA Portal V14

    Remove write permissions for every non-administrative user on files and folders located below the "TraceEngine" folder (usually located at "C:\ProgramData\Siemens\Automation")

  • MitigationTIA Portal V15

    Remove write permissions for every non-administrative user on files and folders located below the "TraceEngine" folder (usually located at "C:\ProgramData\Siemens\Automation")

  • MitigationTIA Portal V16

    Remove write permissions for every non-administrative user on files and folders located below the "TraceEngine" folder (usually located at "C:\ProgramData\Siemens\Automation")

  • MitigationTIA Portal V17

    Remove write permissions for every non-administrative user on files and folders located below the "TraceEngine" folder (usually located at "C:\ProgramData\Siemens\Automation")

  • Kein Fix geplantTIA Portal V14

    Currently no fix is planned

  • BehobenTIA Portal V15

    Update to V15.1 Update 7 or later version

    https://support.industry.siemens.com/cs/de/de/view/109763890/
  • BehobenTIA Portal V16

    Update to V16 Update 6 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109775861/
  • BehobenTIA Portal V17

    Update to V17 Update 4 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109784441/
  • WorkaroundTIA Portal V14

    A partially working fix for Native Language Windows Versions in English or Multilingual User Interface (MUI) Windows Installation was included in TIA Portal Versions V14 SP1 Update 10, V15 SP1 Update 4,V16 Update 1 and V17

  • WorkaroundTIA Portal V15

    A partially working fix for Native Language Windows Versions in English or Multilingual User Interface (MUI) Windows Installation was included in TIA Portal Versions V14 SP1 Update 10, V15 SP1 Update 4,V16 Update 1 and V17

  • WorkaroundTIA Portal V16

    A partially working fix for Native Language Windows Versions in English or Multilingual User Interface (MUI) Windows Installation was included in TIA Portal Versions V14 SP1 Update 10, V15 SP1 Update 4,V16 Update 1 and V17

  • WorkaroundTIA Portal V17

    A partially working fix for Native Language Windows Versions in English or Multilingual User Interface (MUI) Windows Installation was included in TIA Portal Versions V14 SP1 Update 10, V15 SP1 Update 4,V16 Update 1 and V17

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan