CVE-2023-46096

published 2023-11-14

CVE-2023-46096: A vulnerability has been identified in SIMATIC PCS neo (All versions < V4.1). The PUD Manager of affected products does not properly authenticate users in the…

medium 6.5 CVSS 3.1

AV A AC L PR N UI N S U C N I H A N

A vulnerability has been identified in SIMATIC PCS neo (All versions < V4.1). The PUD Manager of affected products does not properly authenticate users in the PUD Manager web service. This could allow an unauthenticated adjacent attacker to generate a privileged token and upload additional documents.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
siemens	simatic_pcs_neo	< 4.1	4.1
siemens	simatic_pcs_neo	—	—

CWE-306