Vulnerabilities > CVE-2023-46097 - Unspecified vulnerability in Siemens Simatic PCS NEO 3.0/3.1/4.0
Attack vector
ADJACENT_NETWORK Attack complexity
LOW Privileges required
LOW Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH low complexity
siemens
Summary
A vulnerability has been identified in SIMATIC PCS neo (All versions < V4.1). The PUD Manager of affected products does not properly neutralize user provided inputs. This could allow an authenticated adjacent attacker to execute SQL statements in the underlying database.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 5 |