CVE-2023-46097

published 2023-11-14

CVE-2023-46097: A vulnerability has been identified in SIMATIC PCS neo (All versions < V4.1). The PUD Manager of affected products does not properly neutralize user provided…

high 8 CVSS 3.1

AV A AC L PR L UI N S U C H I H A H

A vulnerability has been identified in SIMATIC PCS neo (All versions < V4.1). The PUD Manager of affected products does not properly neutralize user provided inputs. This could allow an authenticated adjacent attacker to execute SQL statements in the underlying database.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
siemens	simatic_pcs_neo	< 4.1	4.1
siemens	simatic_pcs_neo	—	—

CWE-89