As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens’ ProductCERT Security Advisories (CERT Services | Services | Siemens Global).
1. EXECUTIVE SUMMARY
- CVSS v4 4.8
- ATTENTION: Low attack complexity
- Vendor: Siemens
- Equipment: TIA Administrator
- Vulnerability: Creation of Temporary File in Directory with Insecure Permissions
2. RISK EVALUATION
Successful exploitation of this vulnerability could allow an attacker to disrupt the update process.
3. TECHNICAL DETAILS
3.1 AFFECTED PRODUCTS
The following versions of Siemens TIA Administrator, a web-based framework, are affected:
- TIA Administrator: All versions prior to V3 SP2
3.2 Vulnerability Overview
3.2.1 CREATION OF TEMPORARY FILE IN DIRECTORY WITH INSECURE PERMISSIONS CWE-379
The affected component creates temporary download files in a directory with insecure permissions. This could allow any authenticated attacker on Windows to disrupt the update process.
CVE-2023-38533 has been assigned to this vulnerability. A CVSS v3.1 base score of 3.3 has been calculated; the CVSS vector string is (AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L).
A CVSS v4 score has also been calculated for This article has been indexed from All CISA Advisories