CVE-2023-46099

Summary

CVE-2023-46099 is a stored cross-site scripting (XSS) vulnerability affecting all versions of SIMATIC PCS neo below V4.1. The Administration Console of this product contains the issue, allowing a privileged attacker to inject malicious Javascript code. Subsequently, this code is executed by another legitimate user, posing a potential threat to system security and data confidentiality. The vulnerability can lead to unauthorized access or manipulation of the system, emphasizing the importance of updating to the latest version of SIMATIC PCS neo to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.