CVE-2019-10934

A vulnerability has been identified in TIA Portal V14 (All versions), TIA Portal V15 (All versions < V15.1 Update 7), TIA Portal V16 (All versions < V16 Update 6), TIA Portal V17 (All versions < V17 Update 4). Changing the contents of a configuration file could allow an attacker to execute arbitrary code with SYSTEM privileges. The security vulnerability could be exploited by an attacker with a valid account and limited access rights on the system. No user interaction is required. At the time of advisory publication no public exploitation of this security vulnerability was known.

• CWE-22
• CWE-22

• https://cert-portal.siemens.com/productcert/pdf/ssa-629512.pdfVendor Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-629512.pdfVendor Advisory

Published

Jan 16, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-10928A vulnerability has been identified in SCALANCE SC-600 (V2.0…6.6
• CVE-2019-10929A vulnerability has been identified in SIMATIC CP 1626 (All …5.9
• CVE-2019-1093An information disclosure vulnerability exists when DirectWr…
• CVE-2019-10930A vulnerability has been identified in All other SIPROTEC 5 …
• CVE-2019-10931A vulnerability has been identified in All other SIPROTEC 5 …7.5
• CVE-2019-10933A vulnerability has been identified in Spectrum Power 3 (Cor…
• CVE-2019-10935A vulnerability has been identified in SIMATIC PCS 7 V8.0 an…
• CVE-2019-10936Affected devices improperly handle large amounts of speciall…7.5
• CVE-2019-10937A vulnerability has been identified in SIMATIC TDC CP51M1 (A…7.5
• CVE-2019-10938A vulnerability has been identified in SIPROTEC 5 devices wi…9.8
• CVE-2019-10939A vulnerability has been identified in TIM 3V-IE (incl. SIPL…9.8
• CVE-2019-1094An information disclosure vulnerability exists when the Wind…