← CVE Intelligence

CVE-2023-38558

Siemens / SIMATIC PCS neo (Administration Console) V4.0 PUBLISHED

Description (CNA)

A vulnerability has been identified in SIMATIC PCS neo (Administration Console) V4.0 (All versions), SIMATIC PCS neo (Administration Console) V4.0 Update 1 (All versions). The affected application leaks Windows admin credentials. An attacker with local access to the Administration Console could get the credentials, and impersonate the admin user, thereby gaining admin access to other Windows systems.

Affected (CNA)

Vendor / productVersions
Siemens / SIMATIC PCS neo (Administration Console) V4.0affected All versions
Siemens / SIMATIC PCS neo (Administration Console) V4.0 Update 1affected All versions

CWE

CWE-538

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.