CVE-2023-46282: XSS
A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All versions < V2312), SIMATIC PCS neo (All versions < V4.1), SINEC NMS (All versions < V2.0 SP1), Totally Integrated Automation Portal (TIA Portal) V14 (All versions), Totally Integrated Automation Portal (TIA Portal) V15.1 (All versions), Totally Integrated Automation Portal (TIA Portal) V16 (All versions), Totally Integrated Automation Portal (TIA Portal) V17 (All versions < V17 Update 8), Totally Integrated Automation Portal (TIA Portal) V18 (All versions < V18 Update 3). A reflected cross-site scripting (XSS) vulnerability exists in the web interface of the affected applications that could allow an attacker to inject arbitrary JavaScript code. The code could be potentially executed later by another (possibly privileged) user.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2023-46282?
CVE-2023-46282 has been classified as a significant vulnerability affecting multiple Siemens products.
How do I fix CVE-2023-46282?
To remediate CVE-2023-46282, update all affected Siemens products to their latest versions as specified in vendor advisories.
Which Siemens products are affected by CVE-2023-46282?
CVE-2023-46282 affects Opcenter Execution Foundation, Opcenter Quality, SIMATIC PCS neo, SINEC NMS, and several versions of the Totally Integrated Automation Portal.
When was CVE-2023-46282 disclosed?
CVE-2023-46282 was disclosed as part of a broader advisory by Siemens, detailing multiple vulnerabilities.
What potential impact does CVE-2023-46282 have?
Exploitation of CVE-2023-46282 could allow attackers to affect the integrity and availability of the affected Siemens systems.