← CVE Intelligence

CVE-2025-40566

Siemens / SIMATIC PCS neo V4.1 PUBLISHED

Description (CNA)

A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions < V4.1 Update 3), SIMATIC PCS neo V5.0 (All versions < V5.0 Update 1). Affected products do not correctly invalidate user sessions upon user logout. This could allow a remote unauthenticated attacker, who has obtained the session token by other means, to re-use a legitimate user's session even after logout.

Affected (CNA)

Vendor / productVersions
Siemens / SIMATIC PCS neo V4.1affected 0 before V4.1 Update 3
Siemens / SIMATIC PCS neo V5.0affected 0 before V5.0 Update 1

CWE

CWE-613

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.