PUB Manager SQL Injection

The vulnerability of the PUB Manager web-based system for managing technological processes in SIMATIC PCS neo relates to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries against the database...

PUB Manager web-based system arbitrary document loading

The vulnerability of the administration console of the SIMATIC PCS neo web-based process control system is related to the absence of authentication for critical functions. Exploiting this vulnerability could allow an attacker to download arbitrary documents remotely...