CVE-2023-38533

Name of the Vulnerable Software and Affected Versions TIA Administrator versions prior to V3 SP2

Description A vulnerability has been identified in the affected component of TIA Administrator, which creates temporary download files in a directory with insecure permissions. This could allow any authenticated attacker on Windows to disrupt the update process. The issue is related to the creation of temporary files with insecure permissions, potentially allowing an attacker to interfere with the update process.

Recommendations For versions prior to V3 SP2, update to version V3 SP2 or later to resolve the issue. As a temporary workaround, consider restricting access to the directory where temporary download files are created to minimize the risk of exploitation.