CVE-2023-46097

SIMATIC PCS neo SQL Injection (CVE-2023-46097) affects all versions prior to V4.1. The PUD Manager does not properly neutralize user inputs, allowing an authenticated adjacent attacker to execute SQL statements in the underlying database. Evidence in connected sources confirms the vulnerability a...