description: A vulnerability has been identified in PCS neo (Administration Console) (All versions < V3.1), TIA Portal (V15, V15.1 and V16). Manipulating certain files in specific folders could allow a local attacker to execute code with SYSTEM privileges. The security vulnerability could be exploited by an attacker with a valid account and limited access rights on the system.
problem types: CWE-284: Improper Access Control
affected:
{
product: PCS neo (Administration Console)
vendor: Siemens
versions:
status: affected, version: All versions < V3.1
}
{
product: TIA Portal
vendor: Siemens
versions:
status: affected, version: V15, V15.1 and V16
}
