Vulnerabilities > CVE-2023-46096 - Unspecified vulnerability in Siemens Simatic PCS NEO 3.0/3.1/4.0
Attack vector
ADJACENT_NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
NONE Integrity impact
HIGH Availability impact
NONE low complexity
siemens
Summary
A vulnerability has been identified in SIMATIC PCS neo (All versions < V4.1). The PUD Manager of affected products does not properly authenticate users in the PUD Manager web service. This could allow an unauthenticated adjacent attacker to generate a privileged token and upload additional documents.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 5 |