8.0
High
CVE-2023-46098 A vulnerability has been identified in SIMATIC PCS neo (All versions < V4.1)
Description
A vulnerability has been identified in SIMATIC PCS neo (All versions < V4.1). When accessing the Information Server from affected products, the products use an overly permissive CORS policy. This could allow an attacker to trick a legitimate user to trigger unwanted behavior.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| SIMATIC PCS neo | Versions not published |
References
- cert-portal.siemens.com cert-portal.siemens.com
Timeline
- Published
- Last modified
Other CVEs of SIMATIC PCS neo
The 13 CVEs of SIMATIC PCS neo →
CVE-2023-46285
A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All…
7.5
High
CVE-2023-46284
A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All…
7.5
High
CVE-2023-46283
A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All…
7.5
High
CVE-2023-46282
A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All…
7.1
High