Read the docs
TI-2023-19934 Aliases CVE-2023-38558GHSA-mwjc-697v-r7m7

Exposure of resource to wrong sphere in Siemens SIMATIC PCS neo V4.0

Priority LOW 24CWE-538Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Information disclosure
Confidentiality · integrity · availability
High · None · None
Fix status
No fix listed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-668 and the CVSS impact.

Summary

A vulnerability has been identified in SIMATIC PCS neo (Administration Console) V4.0 (All versions), SIMATIC PCS neo (Administration Console) V4.0 Update 1 (All versions). The affected application leaks Windows admin credentials. An attacker with local access to the Administration Console could get the credentials, and impersonate the admin user, thereby gaining admin access to other Windows systems.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00176 7th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
SiemensSIMATIC PCS neo (Administration Console) V4.0All versions—No fix listedCNA
SiemensSIMATIC PCS neo (Administration Console) V4.0 Update 1All versions—No fix listedCNA
  • SIMATIC PCS neo (Administration Console) V4.0 VendorSiemens Affected All versions Fixed in — No fix listed CNA
  • SIMATIC PCS neo (Administration Console) V4.0 Update 1 VendorSiemens Affected All versions Fixed in — No fix listed CNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:a:siemens:simatic_pcs_neo:4.0:-:*:*:*:*:*:*4.0VulnerableSiemens
cpe:2.3:a:siemens:simatic_pcs_neo:4.0:update_1:*:*:*:*:*:*4.0 update_1VulnerableSiemens
  • cpe:2.3:a:siemens:simatic_pcs_neo:4.0:-:*:*:*:*:*:* Versions 4.0 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_pcs_neo:4.0:update_1:*:*:*:*:*:* Versions 4.0 update_1 Vulnerable ·Siemens

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-38558
  2. 2026-10-03 Alias added: GHSA-mwjc-697v-r7m7

References

Patch 1

  • TI-2021-03396 Out-of-bounds read in Wibu-Systems CodeMeter CVSS 3.1CRITICAL 9.1
  • TI-2025-21515 Out-of-bounds read in Siemens SIMATIC PCS neo V4.1 CVSS 4.0HIGH 8.7
  • TI-2025-21514 Out-of-bounds write in Siemens SIMATIC PCS neo V4.1 CVSS 4.0HIGH 8.7
  • TI-2023-24750 SQL injection in Siemens SIMATIC PCS neo CVSS 3.1HIGH 8.0
  • TI-2023-24902 A vulnerability has been identified in Opcenter Execution Foundation (All versions <… CVSS 3.1HIGH 8.8
  • TI-2025-27243 Stack-based buffer overflow in Siemens SIMATIC PCS neo V4.1 CVSS 4.0CRITICAL 9.3
See all 23 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences