What is CVE-2023-38533?

CVE-2023-38533 is a low-severity vulnerability in Siemens Tia Administrator, classified under Creation of Temporary File in Directory with Insecure Permissions. CVSS score: 3.3/10. Published 2024-06-11.

How severe is CVE-2023-38533?

Low severity. CVSS v3 base score is 3.3 out of 10.

Vulnerability in Siemens Tia Administrator

CVE-2023-38533

A vulnerability has been identified in TIA Administrator (All versions < V3 SP2). The affected component creates temporary download files in a directory with insecure permissions. This could allow any authenticated attacker on Windows to d…

EPSS: 0.001 (4.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 3.3 (Low). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L.

Affected products

Siemens Tia Administrator — versions 0
Siemens Tia_administrator — versions 3.0

Weakness classification (CWE)

CWE-379 — Creation of Temporary File in Directory with Insecure Permissions

References

productcert@siemens.com (Vendor Advisory)

Frequently asked questions

What is CVE-2023-38533?: CVE-2023-38533 is a low-severity vulnerability in Siemens Tia Administrator, classified under Creation of Temporary File in Directory with Insecure Permissions. CVSS score: 3.3/10. Published 2024-06-11.
How severe is CVE-2023-38533?: Low severity. CVSS v3 base score is 3.3 out of 10.