Beveiligingsadvies

CVE-2025-40566

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-05-13 09:38:52

Laatst bijgewerkt 2025-05-13 18:47:35

Toegewezen door siemens

CVSS-score 8.8

Status PUBLISHED

Beschrijving

A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions < V4.1 Update 3), SIMATIC PCS neo V5.0 (All versions < V5.0 Update 1). Affected products do not correctly invalidate user sessions upon user logout. This could allow a remote unauthenticated attacker, who has obtained the session token by other means, to re-use a legitimate user's session even after logout.

← Alle CVE's bekijken Bekijk op cve.org ↗