ICSA-23-320-06

Siemens SIMATIC PCS neo

Advisory ansehen veröffentlicht 2023-11-14

SIMATIC PCS neo before V4.1 is affected by multiple vulnerabilities. Siemens has released a new version for SIMATIC PCS neo and recommends to update to the latest version.

beschreibt (4)

Zugehörige CVEs.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2023-46099US	medium4.8	0.39% (33rd)	—	2023-11-14
A vulnerability has been identified in SIMATIC PCS neo (All versions < V4.1). There is a stored cross-site scripting vulnerability in the Administration Console of the affected pro…
CVE-2023-46098US	high8.8	0.62% (49th)	—	2023-11-14
A vulnerability has been identified in SIMATIC PCS neo (All versions < V4.1). When accessing the Information Server from affected products, the products use an overly permissive CO…
CVE-2023-46097US	high8.0	0.43% (37th)	—	2023-11-14
A vulnerability has been identified in SIMATIC PCS neo (All versions < V4.1). The PUD Manager of affected products does not properly neutralize user provided inputs. This could all…
CVE-2023-46096US	medium6.5OT erhöht	0.32% (24th)	—	2023-11-14
A vulnerability has been identified in SIMATIC PCS neo (All versions < V4.1). The PUD Manager of affected products does not properly authenticate users in the PUD Manager web servi…

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

Behebungen (4)

BehobenSIMATIC PCS neo
Update to V4.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825230/
BehobenSIMATIC PCS neo
Update to V4.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825230/
BehobenSIMATIC PCS neo
Update to V4.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825230/
BehobenSIMATIC PCS neo
Update to V4.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825230/

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan