VYPR
← All advisories
Unrated severityNVD Advisory· Published Sep 14, 2023· Updated Feb 27, 2025

CVE-2023-38558

CVE-2023-38558

Description

A vulnerability has been identified in SIMATIC PCS neo (Administration Console) V4.0 (All versions), SIMATIC PCS neo (Administration Console) V4.0 Update 1 (All versions). The affected application leaks Windows admin credentials. An attacker with local access to the Administration Console could get the credentials, and impersonate the admin user, thereby gaining admin access to other Windows systems.

Affected products

3
  • Siemens Foundation/SIMATIC PCS neollm-fuzzy
    Range: <= V4.0 Update 1
  • Siemens/SIMATIC PCS neo (Administration Console) V4.0v5
    Range: All versions
  • Siemens/SIMATIC PCS neo (Administration Console) V4.0 Update 1v5
    Range: All versions

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.