CVE-2023-30757: Siemens Totally Integrated Automation Portal

Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days.

A vulnerability has been identified in Totally Integrated Automation Portal (TIA Portal) V14 (All versions), Totally Integrated Automation Portal (TIA Portal) V15 (All versions), Totally Integrated Automation Portal (TIA Portal) V15.1 (All versions), Totally Integrated Automation Portal (TIA Portal) V16 (All versions), Totally Integrated Automation Portal (TIA Portal) V17 (All versions), Totally Integrated Automation Portal (TIA Portal) V18 (All versions), Totally Integrated Automation Portal (TIA Portal) V19 (All versions), Totally Integrated Automation Portal (TIA Portal) V20 (All versions). The know-how protection feature in affected products does not properly update the encryption of existing program blocks when a project file is updated. This could allow attackers with access to the project file to recover previous - yet unprotected - versions of the project without the knowledge of the know-how protection password.

Affected products

• Siemens Totally Integrated Automation Portal: version 14.0 only; version 15 only; version 15.1 only; version 16 only; version 17 only; version 18 only

Published 2023-06-13. Last modified 2026-06-17.