A vulnerability has been identified in SIMATIC PCS neo (All versions < V4.1). When accessing the Information Server from affected products, the products use an overly permissive CORS policy. This could allow an attacker to trick a legitimate user to trigger unwanted behavior.
References
| Link | Resource |
|---|---|
| https://cert-portal.siemens.com/productcert/pdf/ssa-456933.pdf | Patch Vendor Advisory |
Configurations
History
20 Nov 2023, 14:48
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.8 |
| First Time |
Siemens
Siemens simatic Pcs Neo |
|
| References | () https://cert-portal.siemens.com/productcert/pdf/ssa-456933.pdf - Patch, Vendor Advisory | |
| CPE | cpe:2.3:a:siemens:simatic_pcs_neo:*:*:*:*:*:*:*:* |
14 Nov 2023, 11:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-11-14 11:15
Updated : 2023-11-20 14:48
NVD link : CVE-2023-46098
Mitre link : CVE-2023-46098
JSON object : View
Products Affected
siemens
- simatic_pcs_neo
CWE
No CWE.