CVE-2023-38533 LOW

CVE-2023-38533

Vendor Siemens

Product TIA Administrator

Weakness CWE-379

Published June 11, 2024

Last update August 2, 2024

View on NVD All CVEs

CVSS base score

3.3/10

Attack vector Local

Attack complexity Low

Privileges required Low

User interaction None

Confidentiality None

Integrity None

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:T/RC:C

What the vulnerability does

01Description

A vulnerability has been identified in TIA Administrator (All versions < V3 SP2). The affected component creates temporary download files in a directory with insecure permissions. This could allow any authenticated attacker on Windows to disrupt the update process.

Key dates

02Disclosure timeline

June 11, 2024 CVE published

August 2, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2023-38533 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/379.html

Related vulnerabilities

04Related CVE

CVE-2021-21363 Generator Web Application: Local Privilege Escalation Vulnerability via System Temp Directory CVE-2023-21611 Adobe Acrobat Reader Creation of Temporary File in Directory with Incorrect Permissions Privilege escalation CVE-2021-31411 Insecure temporary directory usage in frontend build functionality of Vaadin 14 and 15-19 CVE-2025-21173 .NET Elevation of Privilege Vulnerability CVE-2023-32450