Summary
The Administration Console of SIMATIC PCS neo leaks Windows admin credentials. An attacker with local Windows access to the Administration Console could get the credentials, and impersonate the admin user, thereby gaining admin access to other Windows systems.
Siemens has released a security patch for the affected products and recommends to install the patch.
Vulnerabilities 1
-
Medium 5.5
A vulnerability has been identified in SIMATIC PCS neo (Administration Console) V4.0 (All versions), SIMATIC PCS neo (A…
Revision history
-
#1
Publication Date
References
-
SSA-646240: Sensitive Information Disclosure in SIMATIC PCS neo Administration Console - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-646240.html
-
SSA-646240: Sensitive Information Disclosure in SIMATIC PCS neo Administration Console - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-646240.pdf
-
SSA-646240: Sensitive Information Disclosure in SIMATIC PCS neo Administration Console - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-646240.txt