Siemens TIA administrator Tool RCEThe vulnerability is an authentication bypass in the TIA Administrator server.
An attacker could execute arbitrary application commands through websockets on the node.js server which is externally exposed by default.
By exploiting this vulnerability, an unauthenticated remote attacker could perform actions on TIA Portal, such as elevating privileges, changing proxy settings, or specifying malicious firmware updates.登录后查看神龙缓存的 POC 文件快照
登录查看