CVE-2023-38558: Medium severity siemens simatic pcs neo firmware vulnerability

Published Sep 14, 2023

Updated

A vulnerability has been identified in SIMATIC PCS neo (Administration Console) V4.0 (All versions), SIMATIC PCS neo (Administration Console) V4.0 Update 1 (All versions). The affected application leaks Windows admin credentials. An attacker with local access to the Administration Console could get the credentials, and impersonate the admin user, thereby gaining admin access to other Windows systems.

Affected Software

2 affected components

Siemens Simatic Pcs Neo=4.0

Siemens Simatic Pcs Neo=4.0-update_1

Remediation

Patch Available

https://cert-portal.siemens.com/productcert/pdf/ssa-646240.pdf

Event History

Sep 14, 2023

CVE Published

via MITRE·10:39 AM

Data Sourced

via MITRE·10:39 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the vulnerability ID of this vulnerability?

The vulnerability ID is CVE-2023-38558.

What is the title of this vulnerability?

The title of this vulnerability is 'A vulnerability has been identified in SIMATIC PCS neo (Administration Console) V4.0 (All versions)'.

What is the severity of CVE-2023-38558?

The severity of CVE-2023-38558 is medium, with a severity value of 5.5.

What software is affected by CVE-2023-38558?

SIMATIC PCS neo (Administration Console) V4.0 and SIMATIC PCS neo (Administration Console) V4.0 Update 1 are affected by CVE-2023-38558.

How does the vulnerability in SIMATIC PCS neo (Administration Console) V4.0 work?

The vulnerability in SIMATIC PCS neo (Administration Console) V4.0 leaks Windows admin credentials, allowing an attacker with local access to the Administration Console to obtain them.

How can I fix CVE-2023-38558?

To fix CVE-2023-38558, it is recommended to apply the necessary patches and updates provided by Siemens.