CVE-2023-46282

CWE-79 — Cross-site Scripting (XSS)3 documents3 sources
Severity
6.1MEDIUM
EPSS
0.1%
top 68.88%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
10
Siemens Opcenter Execution FoundationSiemens Opcenter QualitySiemens Simatic PCS NEO+7 more
Timeline
PublishedDec 12

Description

A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All versions < V2312), SIMATIC PCS neo (All versions < V4.1), SINEC NMS (All versions < V2.0 SP1), Totally Integrated Automation Portal (TIA Portal) V14 (All versions), Totally Integrated Automation Portal (TIA Portal) V15.1 (All versions), Totally Integrated Automation Portal (TIA Portal) V16 (All versions), Totally Integrated Automation Portal (TIA Portal) V17 (All versions < V17 Upda…

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:LExploitability: 1.6 | Impact: 5.5

Affected Packages11 packages

Patches

Patch: cert-portal.siemens.com ↗Patch: cert-portal.siemens.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-fmr5-j3hh-jpg4: A vulnerability has been identified in Opcenter Quality (All versions), SIMATIC PCS neo (All versions < V4↗2023-12-12
▶
CVEList
CVE-2023-46282: A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All versions < V2312), SIMATIC PCS neo↗2023-12-12
▶
CVE-2023-46282 (MEDIUM CVSS 6.1) | A vulnerability has been identified | cvebase.io