Vulnerabilities > CVE-2023-46098 - Overly Permissive Cross-domain Whitelist vulnerability in Siemens Simatic PCS NEO 3.0/3.1/4.0
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
A vulnerability has been identified in SIMATIC PCS neo (All versions < V4.1). When accessing the Information Server from affected products, the products use an overly permissive CORS policy. This could allow an attacker to trick a legitimate user to trigger unwanted behavior.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 5 |