CVE-2020-25238

2021-02-0915:38:18

CWE-284

siemens

www.cve.org

0.0004 Low

EPSS

Percentile

0.4%

JSON

A vulnerability has been identified in PCS neo (Administration Console) (All versions < V3.1), TIA Portal (V15, V15.1 and V16). Manipulating certain files in specific folders could allow a local attacker to execute code with SYSTEM privileges. The security vulnerability could be exploited by an attacker with a valid account and limited access rights on the system.

CNA Affected

[
  {
    "product": "PCS neo (Administration Console)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V3.1"
      }
    ]
  },
  {
    "product": "TIA Portal",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "V15, V15.1 and V16"
      }
    ]
  }
]