CVE-2023-46097

8.0 highEPSS 0.4%

High (8.0) in siemens simatic pcs neo. EPSS 0.4% chance of exploitation in the next 30 days.

A vulnerability has been identified in SIMATIC PCS neo (All versions < V4.1). The PUD Manager of affected products does not properly neutralize user provided inputs. This could allow an authenticated adjacent attacker to execute SQL statements in the underlying database.

Severity

CVSS 3.1

8.0 high

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 37% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2023-11-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

siemens:simatic_pcs_neo

References

https://cert-portal.siemens.com/productcert/pdf/ssa-456933.pdf
https://cert-portal.siemens.com/productcert/pdf/ssa-456933.pdf

Check your stack JSON