CVE-2023-38558
CVE-2023-38558
Vexday Risk Score
13Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 5.5EPSS 0.2%KEV nãoPoC —Patch —
Ciclo de vida
14 sep 2023Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
A vulnerability has been identified in SIMATIC PCS neo (Administration Console) V4.0 (All versions), SIMATIC PCS neo (Administration Console) V4.0 Update 1 (All versions). The affected application leaks Windows admin credentials. An attacker with local access to the Administration Console could get the credentials, and impersonate the admin user, thereby gaining admin access to other Windows systems.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
Productos afectados
Siemens · SIMATIC PCS neo (Administration Console) V4.0Siemens · SIMATIC PCS neo (Administration Console) V4.0 Update 1¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →