CVE-2024-36266

CVE-2024-36266 affects Siemens PowerSys (all versions before v3.11). The vulnerability centers on improper authentication: PowerSys reportedly returns responses to authentication requests that can be exploited by a local attacker to bypass authentication and obtain administrative privileges on ma...