Siemens SIMATIC PCS neo has a loose cross domain policy vulnerability with untrusted domains

2023-11-1500:00:00

China National Vulnerability Database

www.cnvd.org.cn

siemens simatic pcs neo

cross domain policy

vulnerability

untrusted domains

distributed control system

attacker

legitimate user

unwanted behavior

6.7 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

33.3%

JSON

SIMATIC PCS neo is a distributed control system (DCS). Siemens SIMATIC PCS neo suffers from a loose cross-domain policy vulnerability with an untrusted domain, which can be exploited by an attacker to trick a legitimate user into triggering unwanted behavior.