Aller au contenu
en Se connecter
4.3 Moyenne

CVE-2025-27127 A vulnerability has been identified in TIA Project-Server (All versions < V2.1.1), TIA Project-Server V17 (All…

Description

A vulnerability has been identified in TIA Project-Server (All versions < V2.1.1), TIA Project-Server V17 (All versions), Totally Integrated Automation Portal (TIA Portal) V17 (All versions), Totally Integrated Automation Portal (TIA Portal) V18 (All versions), Totally Integrated Automation Portal (TIA Portal) V19 (All versions < V19 Update 4), Totally Integrated Automation Portal (TIA Portal) V20 (All versions < V20 Update 3). The affected application improperly handles uploaded projects in the document root. This could allow an attacker with contributor privileges to cause denial of service by uploading a malicious project.

Produits et versions touchés

Produit Versions touchées Corrigé en
TIA Project-Server 2.1 premières → < 2.1.1 2.1.1
TIA Project-Server V17 Versions non publiées
Totally Integrated Automation Portal (TIA Portal) V17 Versions non publiées
Totally Integrated Automation Portal (TIA Portal) V18 Versions non publiées
Totally Integrated Automation Portal (TIA Portal) V19 Versions non publiées
Totally Integrated Automation Portal (TIA Portal) V20 Versions non publiées

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de TIA Project-Server

Les 3 CVE de TIA Project-Server →
CVE-2025-30033 The affected setup component is vulnerable to DLL hijacking 7.8 Élevée CVE-2022-35868 A vulnerability has been identified in TIA Multiuser Server V14 (All versions), TIA Multiuser Server V15 (All versions <… 6.7 Moyenne
Suivre cette CVE