CVE-2019-10915: High severity siemens tia administrator vulnerability
A vulnerability has been identified in TIA Administrator (All versions < V1.0 SP1 Upd1). The integrated configuration web application (TIA Administrator) allows to execute certain application commands without proper authentication. The vulnerability could be exploited by an attacker with local access to the affected system. Successful exploitation requires no privileges and no user interaction. An attacker could use the vulnerability to compromise confidentiality and integrity and availability of the affected system. At the time of advisory publication no public exploitation of this security vulnerability was known.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the vulnerability ID for this security issue?
The vulnerability ID is CVE-2019-10915.
What is the affected software?
The affected software is Siemens TIA Administrator (versions < V1.0 SP1 Upd1) and Siemens Sinetplan (version 2.0).
What is the severity rating of CVE-2019-10915?
The severity rating of CVE-2019-10915 is high with a value of 7.8.
How can an attacker exploit this vulnerability?
An attacker with local access can exploit this vulnerability by executing certain application commands without proper authentication.
Where can I find more information about CVE-2019-10915?
You can find more information about CVE-2019-10915 at the following references: [SecurityFocus](http://www.securityfocus.com/bid/109124), [Siemens CERT Portal](https://cert-portal.siemens.com/productcert/pdf/ssa-721298.pdf), [Siemens CERT Portal](https://cert-portal.siemens.com/productcert/pdf/ssa-834884.pdf).