| Package | Affected versions | Patched versions |
|---|---|---|
| simatic pcs neo | = 4.1= 5.0< 4.1< 5.0 | 4.15.0 |
A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions < V4.1 Update 3), SIMATIC PCS neo V5.0 (All versions < V5.0 Update 1). Affected products do not correctly invalidate user sessions upon user logout. This could allow a remote unauthenticated attacker, who has obtained the session token by other means, to re-use a legitimate user's session even after logout.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free