Festo: Vulnerable Siemens TIA-Portal in multiple Festo Didactic products
A vulnerability was reported in Siemens TIA Portal. TIA Portal is part of the installation packages of several Festo Didactic products. TP 260 before June 2023 and MES PC based on DELL XE3 contain a vulnerable versions of TIA Portal V15 to V18. Affected products of TIA Portal contain a path traversal vulnerability that could allow the creation or overwrite of arbitrary files in the engineering system.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-26293US | — | — | ||
A vulnerability has been identified in Totally Integrated Automation Portal (TIA Portal) V15 (All versions), Totally Integrated Automation Portal (TIA Portal) V16 (All versions < V… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- FSA-202303: Festo: Vulnerable Siemens TIA-Portal in multiple Festo Didactic products - HTMLself
- CERT@VDE Security Advisoriesexternal
- For further security-related issues in Festo products please contact the Festo Product Security Incident Response Team (PSIRT)external
- FSA-202303: Festo: Vulnerable Siemens TIA-Portal in multiple Festo Didactic products - CSAFself
Behebungen (1)
- Behoben
Update TIA-Portal. Please refer to Siemens SSA-116924 for more details.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan