CVE-2023-30757
Gravedad CVSS v3.1:
MEDIA
Tipo:
CWE-693
Fallo del mecanismo de protección
Fecha de publicación:
13/06/2023
Última modificación:
10/12/2024
Descripción
*** Pendiente de traducción *** A vulnerability has been identified in Totally Integrated Automation Portal (TIA Portal) V14 (All versions), Totally Integrated Automation Portal (TIA Portal) V15 (All versions), Totally Integrated Automation Portal (TIA Portal) V15.1 (All versions), Totally Integrated Automation Portal (TIA Portal) V16 (All versions), Totally Integrated Automation Portal (TIA Portal) V17 (All versions), Totally Integrated Automation Portal (TIA Portal) V18 (All versions), Totally Integrated Automation Portal (TIA Portal) V19 (All versions), Totally Integrated Automation Portal (TIA Portal) V20 (All versions). The know-how protection feature in affected products does not properly update the encryption of existing program blocks when a project file is updated.<br />
<br />
This could allow attackers with access to the project file to recover previous - yet unprotected - versions of the project without the knowledge of the know-how protection password.
Impacto
Puntuación base 3.x
6.20
Gravedad 3.x
MEDIA
Productos y versiones vulnerables
| CPE | Desde | Hasta |
|---|---|---|
| cpe:2.3:a:siemens:totally_integrated_automation_portal:14.0:*:*:*:*:*:*:* | ||
| cpe:2.3:a:siemens:totally_integrated_automation_portal:15:*:*:*:*:*:*:* | ||
| cpe:2.3:a:siemens:totally_integrated_automation_portal:15.1:-:*:*:*:*:*:* | ||
| cpe:2.3:a:siemens:totally_integrated_automation_portal:16:*:*:*:*:*:*:* | ||
| cpe:2.3:a:siemens:totally_integrated_automation_portal:17:*:*:*:*:*:*:* | ||
| cpe:2.3:a:siemens:totally_integrated_automation_portal:18:*:*:*:*:*:*:* |
Para consultar la lista completa de nombres de CPE con productos y versiones, ver esta página