SIEMENS-SSA-721298 · Published 2019-07-09 · View on Siemens ProductCERT ↗

SSA-721298 (Last Update: 2019-07-09): Missing Authentication Vulnerability in TIA Administrator (TIA Portal)

CVSS N/A MEDIUM

Risk Summary

<p>The latest update for TIA Administrator (TIA Portal) fixes a vulnerability that could allow local users to execute arbitary application commands without proper authentication.</p> <p>Siemens has released an update for the affected software and provides workarounds and mitigations until the update can be applied.</p>

Remediations

Refer to Siemens ProductCERT advisory for patch and remediation guidance.

Affected Vendors

Siemens

Affected Products (1)

Siemens · SSA-721298 (Last Update: 2019-07-09): Missing Authentication Vulnerability in TIA Administrator (TIA Portal) See advisory

Get alerted to advisories like this

OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.

Start free trial Learn more