VYPR
← All advisories
High severity7.3NVD Advisory· Published Apr 11, 2023· Updated Jun 17, 2026

CVE-2023-26293

CVE-2023-26293

Description

A vulnerability has been identified in Totally Integrated Automation Portal (TIA Portal) V15 (All versions), Totally Integrated Automation Portal (TIA Portal) V16 (All versions < V16 Update 7), Totally Integrated Automation Portal (TIA Portal) V17 (All versions < V17 Update 6), Totally Integrated Automation Portal (TIA Portal) V18 (All versions < V18 Update 1). Affected products contain a path traversal vulnerability that could allow the creation or overwrite of arbitrary files in the engineering system. If the user is tricked to open a malicious PC system configuration file, an attacker could exploit this vulnerability to achieve arbitrary code execution.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

14
  • Siemens Foundation/Totally Integrated Automation Portal (TIA Portal)llm-fuzzy5 versions
    (expand)+ 4 more
    • (no CPE)
    • (no CPE)range: 0
    • (no CPE)range: 0
    • (no CPE)range: 0
    • (no CPE)range: 0
  • Siemens Foundation/Tia Portal9 versions
    cpe:2.3:a:siemens:tia_portal:15:*:*:*:*:*:*:*+ 8 more
    • cpe:2.3:a:siemens:tia_portal:15:*:*:*:*:*:*:*
    • cpe:2.3:a:siemens:tia_portal:16:*:*:*:*:*:*:*
    • cpe:2.3:a:siemens:tia_portal:17:-:*:*:*:*:*:*
    • cpe:2.3:a:siemens:tia_portal:17:update1:*:*:*:*:*:*
    • cpe:2.3:a:siemens:tia_portal:17:update2:*:*:*:*:*:*
    • cpe:2.3:a:siemens:tia_portal:17:update3:*:*:*:*:*:*
    • cpe:2.3:a:siemens:tia_portal:17:update4:*:*:*:*:*:*
    • cpe:2.3:a:siemens:tia_portal:17:update5:*:*:*:*:*:*
    • cpe:2.3:a:siemens:tia_portal:18:-:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.