6.9
Medium
CVE-2026-110021 Missing GSDX SignatureValue verification
Description
PLCnext Engineer checks GSDX manifest reference digests but does not cryptographically verify the XML `SignatureValue` over canonicalized `SignedInfo`. An unauthenticated local attacker can modify signed GSDML content, update its manifest digest, retain the public certificate data, and leave an invalid nonempty `SignatureValue`. PLCnext Engineer prior to 2026.6 reports the package as `Valid` and selects the modified device description for import under the default policy.
CVSS 4.0 detail
Vector CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:NExploitable with local access to the machine, without an account and without any user action; an attacker can seriously compromise confidentiality, integrity or availability.
- Attack vector
- Local
- Attack complexity
- Low
- Attack requirements
- None
- Privileges required
- None
- Interaction
- None
- Confidentiality
- None
- Integrity
- High
- Availability
- None
- Confidentiality of other systems
- None
- Integrity of other systems
- None
- Availability of other systems
- None
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| PLCnext Engineer 0.0 | 0.0 → < 2026.6 | 2026.6 |
Other CVEs of PLCnext Engineer
The 6 CVEs of PLCnext Engineer →
CVE-2026-110935
Path traversal in plug-in deployment
8.6
High
CVE-2026-110022
Signed plug-in validation bypass
8.6
High
CVE-2023-46144
A download of code without integrity check vulnerability in PLCnext products allows an remote attacker with low…
6.5
Medium
CVE-2023-46142
A incorrect permission assignment for critical resource vulnerability in PLCnext products allows an remote attacker with…
8.8
High