Known vulnerabilities in Totally Integrated Automation Portal (TIA Portal)

Vendor: Siemens
Software: Totally Integrated Automation Portal (TIA Portal)
Software CPE: cpe:2.3:a:siemens:totally_integrated_automation_portal_tia_portal:*:*:*:*:*:*:*:*
Website: https://www.siemens.com/
Total vulnerabilities: 15
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Totally Integrated Automation Portal (TIA Portal) Totally Integrated Automation Portal (TIA Portal) is affected by 15 known vulnerabilities: 8 high, 5 medium, 2 low Critical High Medium Low

Vulnerabilities (15)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU112903 - Unrestricted Upload of File with Dangerous Type
CVE-2025-27127		 CWE-434 Medium
No
No
 20 Update 3 15.07.2025 SB2025071534
#VU109419 - Out-of-bounds read
CVE-2025-30176		 CWE-125 High
No
No
 2.15.1.1 19.05.2025 SB2025051943
#VU109418 - Out-of-bounds write
CVE-2025-30175		 CWE-787 High
No
No
 2.15.1.1 19.05.2025 SB2025051943
#VU109417 - Out-of-bounds read
CVE-2025-30174		 CWE-125 High
No
No
 2.15.1.1 19.05.2025 SB2025051943
#VU105636 - Information Exposure Through Timing Discrepancy
CVE-2024-42512		 CWE-208 High
Available
No
 - 12.03.2025 SB2025031224
#VU105635 - Authentication Bypass by Primary Weakness
CVE-2024-42513		 CWE-305 High
No
No
 19 Update 4 12.03.2025 SB2025031224
#VU105437 - Insufficient Session Expiration
CVE-2024-45386		 CWE-613 High
No
No
 19 Update 1 07.03.2025 SB2025030706
#VU102502 - Heap-based Buffer Overflow
CVE-2024-49775		 CWE-122 High
No
No
 - 09.01.2025 SB2025010960
#VU97161 - Heap-based Buffer Overflow
CVE-2024-33698		 CWE-122 High
No
No
 17 Update 8 11.09.2024 SB2024091139
#VU94200 - Deserialization of Untrusted Data
CVE-2023-32737		 CWE-502 Low
No
No
 18 Update 2 12.07.2024 SB2024071241
#VU84382 - Improper input validation
CVE-2023-46285		 CWE-20 Medium
No
No
 - 13.12.2023 SB2023121329
#VU84378 - Memory corruption
CVE-2023-46284		 CWE-119 Medium
No
No
 - 13.12.2023 SB2023121329
#VU84375 - Memory corruption
CVE-2023-46283		 CWE-119 Medium
No
No
 - 13.12.2023 SB2023121329
#VU84371 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-46282		 CWE-79 Low
No
No
 - 13.12.2023 SB2023121329
#VU84369 - Overly Permissive Cross-domain Whitelist
CVE-2023-46281		 CWE-942 Medium
No
No
 - 13.12.2023 SB2023121329