Advisories · Technology

Siemens Totally Integrated Automation Portal (TIA Portal) V20.

Every CVE that names Siemens Totally Integrated Automation Portal (TIA Portal) V20 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-27127 CVE record

CVSS 5.3 Medium

Unrestricted file upload in Siemens TIA Project-Server and others
- Siemens TIA Project-Server
- Siemens TIA Project-Server V17
- Unrestricted file upload
Not analysed yet 8 Jul 2025
CVE-2025-30176 CVE record

CVSS 8.7 High

Out-of-bounds read in Siemens SIMATIC PCS neo V4.1 and others
- Siemens SIMATIC PCS neo V4.1
- Siemens SIMATIC PCS neo V5.0
- Memory corruption
Not analysed yet 13 May 2025
CVE-2025-30175 CVE record

CVSS 8.7 High

Out-of-bounds write in Siemens SIMATIC PCS neo V4.1 and others
- Siemens SIMATIC PCS neo V4.1
- Siemens SIMATIC PCS neo V5.0
- Memory corruption
Not analysed yet 13 May 2025
CVE-2025-30174 CVE record

CVSS 8.7 High

Out-of-bounds read in Siemens SIMATIC PCS neo V4.1 and others
- Siemens SIMATIC PCS neo V4.1
- Siemens SIMATIC PCS neo V5.0
- Memory corruption
Not analysed yet 13 May 2025
CVE-2023-30757 CVE record

CVSS 6.2 Medium

Protection mechanism failure in Siemens Totally Integrated Automation Portal (TIA Portal) V14 and others
- Siemens Totally Integrated Automation Portal (TIA Portal) V14
- Siemens Totally Integrated Automation Portal (TIA Portal) V15
- CWE-693
Not analysed yet 13 Jun 2023