SSA-646240 V1.0: Sensitive Information Disclosure in SIMATIC PCS neo Administration Console

Risk Summary

<p>The Administration Console of SIMATIC PCS neo leaks Windows admin credentials. An attacker with local Windows access to the Administration Console could get the credentials, and impersonate the admin user, thereby gaining admin access to other Windows systems.</p> <p>Siemens has released a security patch for the affected products and recommends to install the patch.</p>

Remediations

• Refer to Siemens ProductCERT advisory for patch and remediation guidance.

Affected Vendors

Affected Products (1)