CVE-2023-26293

A vulnerability has been identified in Totally Integrated Automation Portal (TIA Portal) V15 (All versions), Totally Integrated Automation Portal (TIA Portal) V16 (All versions < V16 Update 7), Totally Integrated Automation Portal (TIA Portal) V17 (All versions < V17 Update 6), Totally Integrated Automation Portal (TIA Portal) V18 (All versions < V18 Update 1). Affected products contain a path traversal vulnerability that could allow the creation or overwrite of arbitrary files in the engineering system. If the user is tricked to open a malicious PC system configuration file, an attacker could exploit this vulnerability to achieve arbitrary code execution.

• CWE-20
• CWE-22

• https://cert-portal.siemens.com/productcert/html/ssa-116924.html
• https://cert-portal.siemens.com/productcert/pdf/ssa-116924.pdfPatch, Vendor Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-116924.pdfPatch, Vendor Advisory

Published

Apr 11, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-26288IBM Aspera Orchestrator 4.0.1 does not invalidate session af…5.5
• CVE-2023-26289IBM Aspera Orchestrator 4.0.1 is vulnerable to HTTP header i…5.4
• CVE-2023-2629Improper Neutralization of Formula Elements in a CSV File in…7.8
• CVE-2023-26290Improper Neutralization of Input During Web Page Generation …6.1
• CVE-2023-26291Improper Neutralization of Input During Web Page Generation …6.1
• CVE-2023-26292Improper Neutralization of Input During Web Page Generation …6.1
• CVE-2023-26294Previous versions of HP Device Manager (prior to HPDM 5.0.10…7.8
• CVE-2023-26295Previous versions of HP Device Manager (prior to HPDM 5.0.10…9.8
• CVE-2023-26296Previous versions of HP Device Manager (prior to HPDM 5.0.10…8.8
• CVE-2023-26297Previous versions of HP Device Manager (prior to HPDM 5.0.10…8.8
• CVE-2023-26298Previous versions of HP Device Manager (prior to HPDM 5.0.10…8.8
• CVE-2023-26299A potential Time-of-Check to Time-of-Use (TOCTOU) vulnerabil…7