Local Credential Exposure in SIMATIC PCS neo Administration Console by Siemens

CVE-2023-38558

What is CVE-2023-38558?

A vulnerability in the Administration Console of SIMATIC PCS neo versions exposes Windows administrator credentials to local attackers. This security flaw allows unauthorized personnel with local access to retrieve sensitive credential information, potentially enabling them to impersonate administrators and gain further access to Windows-based systems. Organizations using affected versions are advised to review their security practices and implement measures to mitigate the risks associated with this vulnerability.

References