Denial of Service Vulnerability in TIA Project-Server and TIA Portal by Siemens
CVE-2025-27127
5.3MEDIUM
Key Information:
- Vendor
Siemens
- Status
- Vendor
- CVE Published:
- 8 July 2025
What is CVE-2025-27127?
A documented vulnerability in Siemens TIA Project-Server and TIA Portal allows an attacker with contributor privileges to exploit how uploaded projects are handled in the document root. By uploading a malicious project, the attacker can trigger a denial of service, impacting system availability. Affected versions span multiple releases of TIA Portal and TIA Project-Server before specific updates are applied, necessitating immediate attention and remediation from users.
Affected Version(s)
TIA Project-Server 0
TIA Project-Server V17 0
Totally Integrated Automation Portal (TIA Portal) V17 0