VYPR
← All advisories
Critical severity9.3NVD Advisory· Published Jun 11, 2024· Updated Jun 17, 2026

CVE-2024-36266

CVE-2024-36266

Description

A vulnerability has been identified in PowerSys (All versions < V3.11). The affected application insufficiently protects responses to authentication requests. This could allow a local attacker to bypass authentication, thereby gaining administrative privileges for the managed remote devices.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Siemens Foundation/PowerSys3 versions
    cpe:2.3:a:siemens:powersys:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:siemens:powersys:*:*:*:*:*:*:*:*range: <3.11
    • (no CPE)range: <V3.11
    • (no CPE)range: 0
  • PowerSys/PowerSysllm-create
    Range: <V3.11

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.