Known vulnerabilities in Totally Integrated Automation Portal (TIA Portal) 16

Vendor: Siemens
Software: Totally Integrated Automation Portal (TIA Portal)
Version: 16
Software CPE: cpe:2.3:a:siemens:totally_integrated_automation_portal_tia_portal:*:*:*:*:*:*:*:*
Website: https://www.siemens.com/
Total vulnerabilities: 7
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Totally Integrated Automation Portal (TIA Portal) version 16 Totally Integrated Automation Portal (TIA Portal) 16 is affected by 7 vulnerabilities: 2 high, 4 medium, 1 low Critical High Medium Low

Vulnerabilities (7)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU102502 - Heap-based Buffer Overflow
CVE-2024-49775		 CWE-122 High
No
No
 - 09.01.2025 SB2025010960
#VU97161 - Heap-based Buffer Overflow
CVE-2024-33698		 CWE-122 High
No
No
 17 Update 8 11.09.2024 SB2024091139
#VU84382 - Improper input validation
CVE-2023-46285		 CWE-20 Medium
No
No
 - 13.12.2023 SB2023121329
#VU84378 - Memory corruption
CVE-2023-46284		 CWE-119 Medium
No
No
 - 13.12.2023 SB2023121329
#VU84375 - Memory corruption
CVE-2023-46283		 CWE-119 Medium
No
No
 - 13.12.2023 SB2023121329
#VU84371 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-46282		 CWE-79 Low
No
No
 - 13.12.2023 SB2023121329
#VU84369 - Overly Permissive Cross-domain Whitelist
CVE-2023-46281		 CWE-942 Medium
No
No
 - 13.12.2023 SB2023121329