CVE-2023-38533: Siemens Tia Administrator

Low severity, CVSS 3.3. EPSS: 0.1% chance of exploitation in the next 30 days.

A vulnerability has been identified in TIA Administrator (All versions < V3 SP2). The affected component creates temporary download files in a directory with insecure permissions. This could allow any authenticated attacker on Windows to disrupt the update process.

Affected products

• Siemens Tia Administrator: before 3.0 (fixed in 3.0); version 3.0 only

Published 2024-06-11. Last modified 2026-06-17.