Description
A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All versions < V2312), SIMATIC PCS neo (All versions < V4.1), SINEC NMS (All versions < V2.0 SP1), Totally Integrated Automation Portal (TIA Portal) V14 (All versions), Totally Integrated Automation Portal (TIA Portal) V15.1 (All versions), Totally Integrated Automation Portal (TIA Portal) V16 (All versions), Totally Integrated Automation Portal (TIA Portal) V17 (All versions < V17 Update 8), Totally Integrated Automation Portal (TIA Portal) V18 (All versions < V18 Update 3). A reflected cross-site scripting (XSS) vulnerability exists in the web interface of the affected applications that could allow an attacker to inject arbitrary JavaScript code. The code could be potentially executed later by another (possibly privileged) user.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Siemens Opcenter Execution Foundation
Default version status: unknown
0 to < V2407affected
Siemens Opcenter Quality
Default version status: unknown
0 to < V2312affected
Siemens SIMATIC PCS neo
Default version status: unknown
0 to < V4.1affected
Siemens SINEC NMS
Default version status: unknown
0 to < V2.0 SP1affected
Siemens Totally Integrated Automation Portal (TIA Portal) V14
Default version status: unknown
0 to < *affected
Siemens Totally Integrated Automation Portal (TIA Portal) V15.1
Default version status: unknown
0 to < *affected
Siemens Totally Integrated Automation Portal (TIA Portal) V16
Default version status: unknown
0 to < *affected
Siemens Totally Integrated Automation Portal (TIA Portal) V17
Default version status: unknown
0 to < V17 Update 8affected
Siemens Totally Integrated Automation Portal (TIA Portal) V18
Default version status: unknown
0 to < V18 Update 3affected