Aller au contenu
en Se connecter
8.8 Élevée

CVE-2024-45386 A vulnerability has been identified in SIMATIC PCS neo V4.0 (All versions), SIMATIC PCS neo V4.1 (All versions < V4.1…

Description

A vulnerability has been identified in SIMATIC PCS neo V4.0 (All versions), SIMATIC PCS neo V4.1 (All versions < V4.1 Update 2), SIMATIC PCS neo V5.0 (All versions < V5.0 Update 1), SIMOCODE ES V19 (All versions < V19 Update 1), SIRIUS Safety ES V19 (TIA Portal) (All versions < V19 Update 1), SIRIUS Soft Starter ES V19 (TIA Portal) (All versions < V19 Update 1), TIA Administrator (All versions < V3.0.4). Affected products do not correctly invalidate user sessions upon user logout. This could allow a remote unauthenticated attacker, who has obtained the session token by other means, to re-use a legitimate user's session even after logout.

Produits et versions touchés

Produit Versions touchées Corrigé en
SIMATIC PCS neo V4.0 Versions non publiées
SIMATIC PCS neo V4.1 Versions non publiées
SIMATIC PCS neo V5.0 Versions non publiées
SIMOCODE ES V19 Versions non publiées
SIRIUS Safety ES V19 (TIA Portal) Versions non publiées
SIRIUS Soft Starter ES V19 (TIA Portal) Versions non publiées
TIA Administrator 3.0 premières → < 3.0.4 3.0.4

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de SIMATIC PCS neo V4.0

Les 5 CVE de SIMATIC PCS neo V4.0 →
CVE-2024-49775 A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2501.0001), Opcenter… 9.8 Critique CVE-2024-33698 A vulnerability has been identified in Opcenter Quality (All versions < V2406), Opcenter RDnL (All versions < V2410),… 9.8 Critique CVE-2022-45147 A vulnerability has been identified in SIMATIC PCS neo V4.0 (All versions), SIMATIC STEP 7 V16 (All versions), SIMATIC… 7.8 Élevée CVE-2023-28831 The OPC UA implementations (ANSI C and C++) in affected products contain an integer overflow vulnerability that could… 7.5 Élevée
Suivre cette CVE