Skip to content
CVE PROGRAM SOURCE RECORD6.3 Medium

CVE-2023-46097

A vulnerability has been identified in SIMATIC PCS neo (All versions < V4.1). The PUD Manager of affected products does not properly neutralize user provided inputs. This could all

Description

A vulnerability has been identified in SIMATIC PCS neo (All versions < V4.1). The PUD Manager of affected products does not properly neutralize user provided inputs. This could allow an authenticated adjacent attacker to execute SQL statements in the underlying database.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Siemens SIMATIC PCS neo

Default version status: unknown

  • All versions < V4.1affected

References