cve/2020/CVE-2020-25238.md

### [CVE-2020-25238](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25238)
![](https://img.shields.io/static/v1?label=Product&message=PCS%20neo%20(Administration%20Console)&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=TIA%20Portal&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-284%3A%20Improper%20Access%20Control&color=brighgreen)

### Description

A vulnerability has been identified in PCS neo (Administration Console) (All versions < V3.1), TIA Portal (V15, V15.1 and V16). Manipulating certain files in specific folders could allow a local attacker to execute code with SYSTEM privileges. The security vulnerability could be exploited by an attacker with a valid account and limited access rights on the system.

### POC

#### Reference
No PoCs from references.

#### Github
- https://github.com/Live-Hack-CVE/CVE-2020-25238