Known vulnerabilities in Totally Integrated Automation Portal (TIA Portal) 20

Vendor: Siemens
Software: Totally Integrated Automation Portal (TIA Portal)
Version: 20
Software CPE: cpe:2.3:a:siemens:totally_integrated_automation_portal_tia_portal:*:*:*:*:*:*:*:*
Website: https://www.siemens.com/
Total vulnerabilities: 4
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Totally Integrated Automation Portal (TIA Portal) version 20 Totally Integrated Automation Portal (TIA Portal) 20 is affected by 4 vulnerabilities: 3 high, 1 medium Critical High Medium Low

Vulnerabilities (4)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU112903 - Unrestricted Upload of File with Dangerous Type
CVE-2025-27127		 CWE-434 Medium
No
No
 20 Update 3 15.07.2025 SB2025071534
#VU109419 - Out-of-bounds read
CVE-2025-30176		 CWE-125 High
No
No
 2.15.1.1 19.05.2025 SB2025051943
#VU109418 - Out-of-bounds write
CVE-2025-30175		 CWE-787 High
No
No
 2.15.1.1 19.05.2025 SB2025051943
#VU109417 - Out-of-bounds read
CVE-2025-30174		 CWE-125 High
No
No
 2.15.1.1 19.05.2025 SB2025051943