CVE-2023-30757
CVSS Score of 10 (low)
Details
Summary
CVE-2023-30757 is a vulnerability that affects Totally Integrated Automation Portal (TIA Portal) versions 14 to 19. The know-how protection feature in these products does not properly update the encryption of existing program blocks when a project file is updated. This vulnerability could allow attackers who have access to the project file to recover previous versions of the project without the knowledge of the know-how protection password. It has a CVSS score of 6.2, indicating a medium severity level. The potential danger it poses to organizations is the unauthorized access and recovery of sensitive project information. To remediate this vulnerability, it is recommended to update the affected TIA Portal versions with the appropriate security patches or fixes provided by Siemens, the vendor of the software.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions