SSA-319319: Denial of Service Vulnerability in TIA Administrator
Advisory ansehen veröffentlicht 2024-06-11
TIA Administrator creates temporary download files in a directory with insecure permissions. This could allow any authenticated attacker on Windows to disrupt the update process. Siemens has released a new version for TIA Administrator and recommends to update to the latest version.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-38533US | — | — | ||
A vulnerability has been identified in TIA Administrator (All versions < V3 SP2). The affected component creates temporary download files in a directory with insecure permissions.… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-319319: Denial of Service Vulnerability in TIA Administrator - CSAF Versionself
- SSA-319319: Denial of Service Vulnerability in TIA Administrator - HTML Versionself
- SSA-319319: Denial of Service Vulnerability in TIA Administrator - PDF Versionself
- SSA-319319: Denial of Service Vulnerability in TIA Administrator - TXT Versionself
03
Behebungen (2)
- MitigationTIA Administrator
Remove write permissions for non-administrative users on files and folders located under the installation path
- BehobenTIA Administrator
Update to V3 SP2 or later version
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan