Insecure Temporary Download Files Could Disrupt Update Process

CVE-2023-38533

Summary

A security issue has been identified in TIA Administrator affecting all versions prior to V3 SP2. This vulnerability arises from the improper handling of temporary download files which are created in a directory with insecure permissions. As a result, any authenticated attacker operating within the Windows environment could exploit this vulnerability to disrupt the update process, potentially leading to system instability and service interruptions. Organizations utilizing TIA Administrator should take necessary precautions to mitigate risks associated with this vulnerability.

References