Known vulnerabilities in Totally Integrated Automation Portal (TIA Portal) 19

Vendor: Siemens
Software: Totally Integrated Automation Portal (TIA Portal)
Version: 19
Software CPE: cpe:2.3:a:siemens:totally_integrated_automation_portal_tia_portal:*:*:*:*:*:*:*:*
Website: https://www.siemens.com/
Total vulnerabilities: 8
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Totally Integrated Automation Portal (TIA Portal) version 19 Totally Integrated Automation Portal (TIA Portal) 19 is affected by 8 vulnerabilities: 7 high, 1 medium Critical High Medium Low

Vulnerabilities (8)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU112903 - Unrestricted Upload of File with Dangerous Type
CVE-2025-27127		 CWE-434 Medium
No
No
 20 Update 3 15.07.2025 SB2025071534
#VU109419 - Out-of-bounds read
CVE-2025-30176		 CWE-125 High
No
No
 2.15.1.1 19.05.2025 SB2025051943
#VU109418 - Out-of-bounds write
CVE-2025-30175		 CWE-787 High
No
No
 2.15.1.1 19.05.2025 SB2025051943
#VU109417 - Out-of-bounds read
CVE-2025-30174		 CWE-125 High
No
No
 2.15.1.1 19.05.2025 SB2025051943
#VU105636 - Information Exposure Through Timing Discrepancy
CVE-2024-42512		 CWE-208 High
Public exploit available
No
 - 12.03.2025 SB2025031224
#VU105635 - Authentication Bypass by Primary Weakness
CVE-2024-42513		 CWE-305 High
No
No
 19 Update 4 12.03.2025 SB2025031224
#VU102502 - Heap-based Buffer Overflow
CVE-2024-49775		 CWE-122 High
No
No
 - 09.01.2025 SB2025010960
#VU97161 - Heap-based Buffer Overflow
CVE-2024-33698		 CWE-122 High
No
No
 17 Update 8 11.09.2024 SB2024091139