Skip to content
fr Sign in
8.8 High

CVE-2024-45386 A vulnerability has been identified in SIMATIC PCS neo V4.0 (All versions), SIMATIC PCS neo V4.1 (All versions < V4.1…

Description

A vulnerability has been identified in SIMATIC PCS neo V4.0 (All versions), SIMATIC PCS neo V4.1 (All versions < V4.1 Update 2), SIMATIC PCS neo V5.0 (All versions < V5.0 Update 1), SIMOCODE ES V19 (All versions < V19 Update 1), SIRIUS Safety ES V19 (TIA Portal) (All versions < V19 Update 1), SIRIUS Soft Starter ES V19 (TIA Portal) (All versions < V19 Update 1), TIA Administrator (All versions < V3.0.4). Affected products do not correctly invalidate user sessions upon user logout. This could allow a remote unauthenticated attacker, who has obtained the session token by other means, to re-use a legitimate user's session even after logout.

Affected products and versions

Product Affected versions Fixed in
SIMATIC PCS neo V4.0 Versions not published
SIMATIC PCS neo V4.1 Versions not published
SIMATIC PCS neo V5.0 Versions not published
SIMOCODE ES V19 Versions not published
SIRIUS Safety ES V19 (TIA Portal) Versions not published
SIRIUS Soft Starter ES V19 (TIA Portal) Versions not published
TIA Administrator 3.0 earliest → < 3.0.4 3.0.4

References

Timeline

  1. Published
  2. Last modified

Other CVEs of SIMATIC PCS neo V4.0

The 5 CVEs of SIMATIC PCS neo V4.0 →
CVE-2024-49775 A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2501.0001), Opcenter… 9.8 Critical CVE-2024-33698 A vulnerability has been identified in Opcenter Quality (All versions < V2406), Opcenter RDnL (All versions < V2410),… 9.8 Critical CVE-2022-45147 A vulnerability has been identified in SIMATIC PCS neo V4.0 (All versions), SIMATIC STEP 7 V16 (All versions), SIMATIC… 7.8 High CVE-2023-28831 The OPC UA implementations (ANSI C and C++) in affected products contain an integer overflow vulnerability that could… 7.5 High
Track this CVE