A vulnerability has been identified in SIMATIC PCS neo (All versions < V4.1). The PUD Manager of affected products does not properly neutralize user provided inputs. This could allow an authenticated adjacent attacker to execute SQL statements in the underlying database.
References
| Link | Resource |
|---|---|
| https://cert-portal.siemens.com/productcert/pdf/ssa-456933.pdf | Patch Vendor Advisory |
Configurations
History
20 Nov 2023, 14:38
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:siemens:simatic_pcs_neo:*:*:*:*:*:*:*:* | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.0 |
| First Time |
Siemens
Siemens simatic Pcs Neo |
|
| References | () https://cert-portal.siemens.com/productcert/pdf/ssa-456933.pdf - Patch, Vendor Advisory |
14 Nov 2023, 11:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-11-14 11:15
Updated : 2023-11-20 14:38
NVD link : CVE-2023-46097
Mitre link : CVE-2023-46097
JSON object : View
Products Affected
siemens
- simatic_pcs_neo
CWE
No CWE.