Security Advisory

CVE-2024-46887

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2024-10-08 08:40:43

Last updated 2025-10-21 14:12:27

Assigner siemens

CVSS score 5.3

State PUBLISHED

Description

The web server of affected devices do not properly authenticate user request to the '/ClientArea/RuntimeInfoData.mwsl' endpoint. This could allow an unauthenticated remote attacker to gain knowledge about current actual and configured maximum cycle times as well as about configured maximum communication load.

← Browse all CVEs View on cve.org ↗