Description
A vulnerability has been identified in SIMATIC PCS neo (All versions < V4.1). The PUD Manager of affected products does not properly authenticate users in the PUD Manager web service. This could allow an unauthenticated adjacent attacker to generate a privileged token and upload additional documents.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | SIMATIC PCS neo | All versions < V4.1 | — |
Advisories 2
- ICSA-23-320-06 Siemens SIMATIC PCS neo CISA ICS & IT advisories · Nov 14, 2023
- SSA-456933 SSA-456933: Multiple Vulnerabilities in SIMATIC PCS neo before V4.1 Siemens ProductCERT · Nov 14, 2023