Not rated

CVE-2020-25238 A vulnerability has been identified in PCS neo (Administration Console) (All versions < V3.1), TIA Portal (V15, V15.1…

Description

A vulnerability has been identified in PCS neo (Administration Console) (All versions < V3.1), TIA Portal (V15, V15.1 and V16). Manipulating certain files in specific folders could allow a local attacker to execute code with SYSTEM privileges. The security vulnerability could be exploited by an attacker with a valid account and limited access rights on the system.

Affected products and versions

Product	Affected versions	Fixed in
PCS neo (Administration Console)	Versions not published
TIA Portal	Versions not published

Do you use PCS neo (Administration Console)?

Track this CVE Watch PCS neo (Administration Console) Check my SBOMs

www.cveye.io/en/cve/CVE-2020-25238

Timeline

Published February 9, 2021
Last modified August 4, 2024

References

cert-portal.siemens.com cert-portal.siemens.com
VU#466044 www.kb.cert.org
us-cert.cisa.gov us-cert.cisa.gov

Track this CVE