PT-2023-5168 · Microsoft+1 · Windows+1

Published 2023-09-14 · Updated 2023-09-20 · CVE-2023-38558

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions SIMATIC PCS neo (Administration Console) versions V4.0 through V4.0 Update 1

Description The issue is related to a leak of information about files and directories in the administration console of the SIMATIC PCS neo system, which can lead to the exposure of Windows admin credentials. An attacker with local access to the Administration Console could exploit this to gain admin access to other Windows systems by impersonating the admin user.

Recommendations For SIMATIC PCS neo (Administration Console) versions V4.0 through V4.0 Update 1, consider restricting local access to the Administration Console to minimize the risk of exploitation until a patch is available. As a temporary workaround, limit the use of the Administration Console to necessary personnel only, to reduce the potential for unauthorized access.

Fix

Exposure of Resource to Wrong Sphere

Weakness Enumeration

CWE-538

CWE-668

Related Identifiers

BDU:2023-05760

CVE-2023-38558

Affected Products

Simatic Pcs Neo

Windows

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2023-38558 · Security Note
• https://osv.dev/vulnerability/CVE-2023-38558 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-05760 · Security Note
• https://cert-portal.siemens.com/productcert/pdf/ssa-646240.pdf · Vendor Advisory
• https://vuldb.com/?id.239728 · Note
• https://t.me/cibsecurity/70439 · Telegram Post