Lucene search
HistoryNov 14, 2023 - 11:15 a.m.
CVE-2023-46097
vulnerability
simatic pcs neo
pud manager
sql injections
database
CVSS3
8
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0
Percentile
9.0%
A vulnerability has been identified in SIMATIC PCS neo (All versions < V4.1). The PUD Manager of affected products does not properly neutralize user provided inputs. This could allow an authenticated adjacent attacker to execute SQL statements in the underlying database.
Affected configurations
Node
siemenssimatic_pcs_neoRange<4.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| siemens | simatic_pcs_neo | * | cpe:2.3:a:siemens:simatic_pcs_neo:*:*:*:*:*:*:*:* |
Related
cnvd
cnvd
Siemens SIMATIC PCS neo SQL Injection Vulnerability
2023-11-15 00:00:00
cvelist
cvelist
CVE-2023-46097
2023-11-14 11:04:19
prion
prion
Design/Logic Flaw
2023-11-14 11:15:00
cve
cve
CVE-2023-46097
2023-11-14 11:15:14
ics
ics
Siemens SIMATIC PCS neo
2023-11-16 12:00:00
CVSS3
8
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0
Percentile
9.0%
Related for NVD:CVE-2023-46097