A vulnerability has been identified in SIMATIC PCS neo V4.0 (All versions), SIMATIC PCS neo V4.1 (All versions < V4.1 Update 2), SIMATIC PCS neo V5.0 (All versions < V5.0 Update 1), SIMOCODE ES V19 (All versions < V19 Update 1), SIRIUS Safety ES V19 (TIA Portal) (All versions < V19 Update 1), SIRIUS Soft Starter ES V19 (TIA Portal) (All versions < V19 Update 1), TIA Administrator (All versions < V3.0.4). Affected products do not correctly invalidate user sessions upon user logout. This could allow a remote unauthenticated attacker, who has obtained the session token by other means, to re-use a legitimate user's session even after logout.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
SIMATIC PCS neo V4.0
Vendor
Siemens
Product
SIMATIC PCS neo V4.0
Platforms
Unknown
Default status
unknown
SIMATIC PCS neo V4.0 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
*
Unavailable
None listed
SIMATIC PCS neo V4.1
Vendor
Siemens
Product
SIMATIC PCS neo V4.1
Platforms
Unknown
Default status
unknown
SIMATIC PCS neo V4.1 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
V4.1 Update 2
Unavailable
None listed
SIMATIC PCS neo V5.0
Vendor
Siemens
Product
SIMATIC PCS neo V5.0
Platforms
Unknown
Default status
unknown
SIMATIC PCS neo V5.0 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
V5.0 Update 1
Unavailable
None listed
SIMOCODE ES V19
Vendor
Siemens
Product
SIMOCODE ES V19
Platforms
Unknown
Default status
unknown
SIMOCODE ES V19 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
V19 Update 1
Unavailable
None listed
SIRIUS Safety ES V19 (TIA Portal)
Vendor
Siemens
Product
SIRIUS Safety ES V19 (TIA Portal)
Platforms
Unknown
Default status
unknown
SIRIUS Safety ES V19 (TIA Portal) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
V19 Update 1
Unavailable
None listed
SIRIUS Soft Starter ES V19 (TIA Portal)
Vendor
Siemens
Product
SIRIUS Soft Starter ES V19 (TIA Portal)
Platforms
Unknown
Default status
unknown
SIRIUS Soft Starter ES V19 (TIA Portal) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
V19 Update 1
Unavailable
None listed
TIA Administrator
Vendor
Siemens
Product
TIA Administrator
Platforms
Unknown
Default status
unknown
TIA Administrator · Scoped product and version facts