Skip to content
fr Sign in
4.3 Medium

CVE-2025-27127 A vulnerability has been identified in TIA Project-Server (All versions < V2.1.1), TIA Project-Server V17 (All…

Description

A vulnerability has been identified in TIA Project-Server (All versions < V2.1.1), TIA Project-Server V17 (All versions), Totally Integrated Automation Portal (TIA Portal) V17 (All versions), Totally Integrated Automation Portal (TIA Portal) V18 (All versions), Totally Integrated Automation Portal (TIA Portal) V19 (All versions < V19 Update 4), Totally Integrated Automation Portal (TIA Portal) V20 (All versions < V20 Update 3). The affected application improperly handles uploaded projects in the document root. This could allow an attacker with contributor privileges to cause denial of service by uploading a malicious project.

Affected products and versions

Product Affected versions Fixed in
TIA Project-Server 2.1 earliest → < 2.1.1 2.1.1
TIA Project-Server V17 Versions not published
Totally Integrated Automation Portal (TIA Portal) V17 Versions not published
Totally Integrated Automation Portal (TIA Portal) V18 Versions not published
Totally Integrated Automation Portal (TIA Portal) V19 Versions not published
Totally Integrated Automation Portal (TIA Portal) V20 Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of TIA Project-Server

The 3 CVEs of TIA Project-Server →
CVE-2025-30033 The affected setup component is vulnerable to DLL hijacking 7.8 High CVE-2022-35868 A vulnerability has been identified in TIA Multiuser Server V14 (All versions), TIA Multiuser Server V15 (All versions <… 6.7 Medium
Track this CVE