{"id":"CVE-2023-26293","aliases":["EUVD-2023-30116","GHSA-pfr5-cpm3-g35v"],"status":"published","title":"A vulnerability has been identified in TIA Portal V15 (All versions), TIA Portal V16 (All...","description":"A vulnerability has been identified in Totally Integrated Automation Portal (TIA Portal) V15 (All versions), Totally Integrated Automation Portal (TIA Portal) V16 (All versions \u003c V16 Update 7), Totally Integrated Automation Portal (TIA Portal) V17 (All versions \u003c V17 Update 6), Totally Integrated Automation Portal (TIA Portal) V18 (All versions \u003c V18 Update 1). Affected products contain a path traversal vulnerability that could allow the creation or overwrite of arbitrary files in the engineering system. If the user is tricked to open a malicious PC system configuration file, an attacker could exploit this vulnerability to achieve arbitrary code execution.","severity":{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00249,"percentile":0.16338,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-20","CWE-22"],"published":"2023-04-11T09:03:02Z","modified":"2026-10-23T23:10:00Z","products":[{"vendor":"siemens","product":"tia_portal"},{"vendor":"siemens","product":"totally integrated automation portal (tia portal) v15"},{"vendor":"siemens","product":"totally integrated automation portal (tia portal) v16"},{"vendor":"siemens","product":"totally integrated automation portal (tia portal) v17"},{"vendor":"siemens","product":"totally integrated automation portal (tia portal) v18"}],"references":[{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-116924.pdf","tags":["x_transferred","Patch","Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-116924.html"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-26293"},{"url":"https://github.com/advisories/GHSA-pfr5-cpm3-g35v"}],"sources":{"cve":[{"id":"CVE-2023-26293","description":"A vulnerability has been identified in Totally Integrated Automation Portal (TIA Portal) V15 (All versions), Totally Integrated Automation Portal (TIA Portal) V16 (All versions \u003c V16 Update 7), Totally Integrated Automation Portal (TIA Portal) V17 (All versions \u003c V17 Update 6), Totally Integrated Automation Portal (TIA Portal) V18 (All versions \u003c V18 Update 1). Affected products contain a path traversal vulnerability that could allow the creation or overwrite of arbitrary files in the engineering system. If the user is tricked to open a malicious PC system configuration file, an attacker could exploit this vulnerability to achieve arbitrary code execution.","status":"published","published":"2023-04-11T09:03:02.235Z","modified":"2024-11-25T21:18:55.576Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C","level":"high","assessor":"cna"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:35:15.434947Z"}],"euvd":[{"id":"EUVD-2023-30116","description":"A vulnerability has been identified in Totally Integrated Automation Portal (TIA Portal) V15 (All versions), Totally Integrated Automation Portal (TIA Portal) V16 (All versions \u003c V16 Update 7), Totally Integrated Automation Portal (TIA Portal) V17 (All versions \u003c V17 Update 6), Totally Integrated Automation Portal (TIA Portal) V18 (All versions \u003c V18 Update 1). Affected products contain a path traversal vulnerability that could allow the creation or overwrite of arbitrary files in the engineering system. If the user is tricked to open a malicious PC system configuration file, an attacker could exploit this vulnerability to achieve arbitrary code execution.","status":"published","published":"2023-04-11T09:03:02Z","modified":"2024-11-25T21:18:55Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C","level":"high"}],"updated_at":"2026-11-03T00:04:48.414867Z"}],"ghsa":[{"id":"GHSA-pfr5-cpm3-g35v","title":"A vulnerability has been identified in TIA Portal V15 (All versions), TIA Portal V16 (All...","description":"A vulnerability has been identified in TIA Portal V15 (All versions), TIA Portal V16 (All versions), TIA Portal V17 (All versions), TIA Portal V18 (All versions \u003c V18 Update 1). Affected products contain a path traversal vulnerability that could allow the creation or overwrite of arbitrary files in the engineering system. If the user is tricked to open a malicious PC system configuration file, an attacker could exploit this vulnerability to achieve arbitrary code execution.","status":"published","published":"2023-04-11T12:30:26Z","modified":"2024-08-13T09:30:51Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L","level":"high"}],"cwes":["CWE-20","CWE-22"],"updated_at":"2026-11-02T14:57:56.424434Z"}],"nvd":[{"id":"CVE-2023-26293","description":"A vulnerability has been identified in Totally Integrated Automation Portal (TIA Portal) V15 (All versions), Totally Integrated Automation Portal (TIA Portal) V16 (All versions \u003c V16 Update 7), Totally Integrated Automation Portal (TIA Portal) V17 (All versions \u003c V17 Update 6), Totally Integrated Automation Portal (TIA Portal) V18 (All versions \u003c V18 Update 1). Affected products contain a path traversal vulnerability that could allow the creation or overwrite of arbitrary files in the engineering system. If the user is tricked to open a malicious PC system configuration file, an attacker could exploit this vulnerability to achieve arbitrary code execution.","status":"published","published":"2023-04-11T10:15:18.157Z","modified":"2026-10-23T23:10:00.157Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L","level":"high","assessor":"secondary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-20","CWE-22"],"updated_at":"2026-11-02T14:07:53.719171Z"}]}}