Local Credential Exposure in SIMATIC PCS neo Administration Console by Siemens

CVE-2023-38558

What is CVE-2023-38558?

A vulnerability in the Administration Console of SIMATIC PCS neo versions exposes Windows administrator credentials to local attackers. This security flaw allows unauthorized personnel with local access to retrieve sensitive credential information, potentially enabling them to impersonate administrators and gain further access to Windows-based systems. Organizations using affected versions are advised to review their security practices and implement measures to mitigate the risks associated with this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References