CVE-2020-25238

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

A vulnerability has been identified in PCS neo (Administration Console) (All versions < V3.1), TIA Portal (V15, V15.1 and V16). Manipulating certain files in specific folders could allow a local attacker to execute code with SYSTEM privileges. The security vulnerability could be exploited by an attacker with a valid account and limited access rights on the system.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-284 CWE-427

Affected software

Vendor	Product	Versions
Siemens	PCS neo (Administration Console)	All versions < V3.1
Siemens	TIA Portal	V15, V15.1 and V16

References

https://cert-portal.siemens.com/productcert/pdf/ssa-428051.pdfVendor Advisory
https://us-cert.cisa.gov/ics/advisories/icsa-21-040-05Third Party Advisory, US Government Resource, VDB Entry
https://www.kb.cert.org/vuls/id/466044Third Party Advisory, US Government Resource
https://cert-portal.siemens.com/productcert/pdf/ssa-428051.pdfVendor Advisory
https://us-cert.cisa.gov/ics/advisories/icsa-21-040-05Third Party Advisory, US Government Resource, VDB Entry
https://www.kb.cert.org/vuls/id/466044Third Party Advisory, US Government Resource

Timeline

Published: Feb 9, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-252398.8A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0). The webserver could allow unauthorized actions vi CVE-2020-25245.9Vulnerability in the Oracle Knowledge product of Oracle Knowledge (component: InQuira Search). Supported versions that are affected are 8.6.CVE-2020-252408.8A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0). Unpriviledged users can access services when gues CVE-2020-252417.5A vulnerability has been identified in SIMATIC MV400 family (All Versions < V7.0.6). The underlying TCP stack of the affected products does CVE-2020-252427.5A vulnerability has been identified in SIMATIC NET CP 343-1 Advanced (incl. SIPLUS variants) (All versions), SIMATIC NET CP 343-1 Lean (incl CVE-2020-252435.1A vulnerability has been identified in LOGO! Soft Comfort (All versions < V8.4). A zip slip vulnerability could be triggered while importing CVE-2020-252448.4A vulnerability has been identified in LOGO! Soft Comfort (All versions < V8.4). The software insecurely loads libraries which makes it vuln CVE-2020-252457.8A vulnerability has been identified in DIGSI 4 (All versions < V4.94 SP1 HF 1). Several folders in the %PATH% are writeable by normal users.CVE-2020-252477.5An issue was discovered in Hyland OnBase through 18.0.0.32 and 19.x through 19.8.9.1000. Directory traversal exists for writing to files, as CVE-2020-252487.5An issue was discovered in Hyland OnBase through 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and CVE-2020-252495.3An issue was discovered in Hyland OnBase 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and 20.3.10.CVE-2020-252507.5An issue was discovered in Hyland OnBase 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and 20.3.10.