CVE-2023-30757

CVSS Score of 10 (low)

Details

Published Jun 13, 2023
Updated: Dec 12, 2023
CWE ID 693

Summary

CVE-2023-30757 is a vulnerability that affects Totally Integrated Automation Portal (TIA Portal) versions 14 to 19. The know-how protection feature in these products does not properly update the encryption of existing program blocks when a project file is updated. This vulnerability could allow attackers who have access to the project file to recover previous versions of the project without the knowledge of the know-how protection password. It has a CVSS score of 6.2, indicating a medium severity level. The potential danger it poses to organizations is the unauthorized access and recovery of sensitive project information. To remediate this vulnerability, it is recommended to update the affected TIA Portal versions with the appropriate security patches or fixes provided by Siemens, the vendor of the software.

Share

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-30757 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options