SSA-460466: Denial of Service Vulnerability in TIA Project-Server and TIA Portal
A vulnerability in TIA Project Server and TIA Portal could allow an attacker to cause a denial of service condition. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends countermeasures for products where fixes are not, or not yet available.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-27127US | — | — | ||
A vulnerability has been identified in TIA Project-Server (All versions < V2.1.1), TIA Project-Server V17 (All versions), Totally Integrated Automation Portal (TIA Portal) V17 (All… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (6)
- Kein Fix geplantTIA Project-Server V17
Currently no fix is planned
- Kein Fix geplantTotally Integrated Automation Portal (TIA Portal) V17
Currently no fix is planned
- Kein Fix geplantTotally Integrated Automation Portal (TIA Portal) V18
Currently no fix is planned
- BehobenTIA Project-Server
Update to V2.1.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109810588/ - BehobenTotally Integrated Automation Portal (TIA Portal) V19
Update to V19 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109925643/ - BehobenTotally Integrated Automation Portal (TIA Portal) V20
Update to V20 Update 3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109963851/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan