CVE-2023-30757
A vulnerability has been identified in Totally Integrated Automation Portal (TIA Portal) V14 (All versions), Totally Integrated Automation…
- Published
- Updated
- Reserved
- Assigned by
- siemens
Description
A vulnerability has been identified in Totally Integrated Automation Portal (TIA Portal) V14 (All versions), Totally Integrated Automation Portal (TIA Portal) V15 (All versions), Totally Integrated Automation Portal (TIA Portal) V15.1 (All versions), Totally Integrated Automation Portal (TIA Portal) V16 (All versions), Totally Integrated Automation Portal (TIA Portal) V17 (All versions), Totally Integrated Automation Portal (TIA Portal) V18 (All versions), Totally Integrated Automation Portal (TIA Portal) V19 (All versions), Totally Integrated Automation Portal (TIA Portal) V20 (All versions). The know-how protection feature in affected products does not properly update the encryption of existing program blocks when a project file is updated. This could allow attackers with access to the project file to recover previous - yet unprotected - versions of the project without the knowledge of the know-how protection password.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| siemensCNA (assigner) | 3.1 | Medium6.2 | CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:T/RC:C |
| NVDNVD · Modified | 3.1 | Medium5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
- EPSS (exploitation in 30 days)
- 0.12% · top 98% of all CVEs (7 Nov 2026)
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 6.2.
Weakness
Affected products
Siemens · Totally Integrated Automation Portal (TIA Portal) V14
- affected < *
Siemens · Totally Integrated Automation Portal (TIA Portal) V15
- affected < *
Siemens · Totally Integrated Automation Portal (TIA Portal) V15.1
- affected < *
Siemens · Totally Integrated Automation Portal (TIA Portal) V16
- affected < *
Siemens · Totally Integrated Automation Portal (TIA Portal) V17
- affected < *
Siemens · Totally Integrated Automation Portal (TIA Portal) V18
- affected < *
Siemens · Totally Integrated Automation Portal (TIA Portal) V19
- affected < *
Siemens · Totally Integrated Automation Portal (TIA Portal) V20
- affected < *
References (2)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2023-30757)Record last updated .