Attackers Can Redirect Users to Malicious URLs via Insecure Input Validation
CVE-2024-46886
5.1MEDIUM
Key Information:
- Vendor
Siemens
- Status
- Vendor
- CVE Published:
- 8 October 2024
What is CVE-2024-46886?
The web server of affected devices does not properly validate input that is used for a user redirection. This could allow an attacker to make the server redirect the legitimate user to an attacker-chosen URL. For a successful exploit, the legitimate user must actively click on an attacker-crafted link.
Affected Version(s)
SIMATIC Drive Controller CPU 1504D TF 0
SIMATIC Drive Controller CPU 1507D TF 0
SIMATIC ET 200SP CPU 1510SP F-1 PN 0