Beveiligingsadvies

CVE-2023-46098

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-11-14 11:04:20
Laatst bijgewerkt 2025-01-08 16:35:08
Toegewezen door siemens
CVSS-score 8.0
Status PUBLISHED

Beschrijving

A vulnerability has been identified in SIMATIC PCS neo (All versions < V4.1). When accessing the Information Server from affected products, the products use an overly permissive CORS policy. This could allow an attacker to trick a legitimate user to trigger unwanted behavior.