3.3
Low
CVE-2023-38533 A vulnerability has been identified in TIA Administrator (All versions < V3 SP2)
Description
A vulnerability has been identified in TIA Administrator (All versions < V3 SP2). The affected component creates temporary download files in a directory with insecure permissions. This could allow any authenticated attacker on Windows to disrupt the update process.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| TIA Administrator | Versions not published | |
| tia_administrator 3 | earliest → < 3sp2 | 3sp2 |
References
- cert-portal.siemens.com cert-portal.siemens.com
Timeline
- Published
- Last modified
Other CVEs of TIA Administrator
The 7 CVEs of TIA Administrator →
CVE-2025-30033
The affected setup component is vulnerable to DLL hijacking
7.8
High
CVE-2025-23365
A vulnerability has been identified in TIA Administrator (All versions < V3.0.6)
7.8
High
CVE-2025-23364
A vulnerability has been identified in TIA Administrator (All versions < V3.0.6)
6.2
Medium
CVE-2024-45386
A vulnerability has been identified in SIMATIC PCS neo V4.0 (All versions), SIMATIC PCS neo V4.1 (All versions < V4.1…
8.8
High