Description
A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All versions < V2312), SIMATIC PCS neo (All versions < V4.1), SINEC NMS (All versions < V2.0 SP1), Totally Integrated Automation Portal (TIA Portal) V14 (All versions), Totally Integrated Automation Portal (TIA Portal) V15.1 (All versions), Totally Integrated Automation Portal (TIA Portal) V16 (All versions), Totally Integrated Automation Portal (TIA Portal) V17 (All versions < V17 Update 8), Totally Integrated Automation Portal (TIA Portal) V18 (All versions < V18 Update 3). When accessing the UMC Web-UI from affected products, UMC uses an overly permissive CORS policy. This could allow an attacker to trick a legitimate user to trigger unwanted behavior.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Siemens Opcenter Execution Foundation
Default version status: unknown
0 to < V2407affected
Siemens Opcenter Quality
Default version status: unknown
0 to < V2312affected
Siemens SIMATIC PCS neo
Default version status: unknown
0 to < V4.1affected
Siemens SINEC NMS
Default version status: unknown
0 to < V2.0 SP1affected
Siemens Totally Integrated Automation Portal (TIA Portal) V14
Default version status: unknown
0 to < *affected
Siemens Totally Integrated Automation Portal (TIA Portal) V15.1
Default version status: unknown
0 to < *affected
Siemens Totally Integrated Automation Portal (TIA Portal) V16
Default version status: unknown
0 to < *affected
Siemens Totally Integrated Automation Portal (TIA Portal) V17
Default version status: unknown
0 to < V17 Update 8affected
Siemens Totally Integrated Automation Portal (TIA Portal) V18
Default version status: unknown
0 to < V18 Update 3affected