CVSS 3.1 Score 5.5 of 10 (medium)


Published Sep 14, 2023
Updated: Sep 20, 2023
CWE ID 668
CWE ID 538


CVE-2023-38558 is a vulnerability that affects SIMATIC PCS neo (Administration Console) V4.0 and SIMATIC PCS neo (Administration Console) V4.0 Update 1. The vulnerability allows the affected application to leak Windows admin credentials, potentially granting an attacker with local access to the Administration Console the ability to impersonate the admin user and gain admin access to other Windows systems. The base severity of this vulnerability is rated as MEDIUM, with a base score of 5.5 according to CVSS:3.1 standards. The confidentiality impact is considered HIGH, while the integrity impact is NONE and the availability impact is NONE. The exploitability score for this vulnerability is 1.8, indicating a relatively low risk of exploitation. It is recommended to apply appropriate security measures or patches provided by the vendor to remediate this vulnerability and prevent potential unauthorized access to sensitive information within an organization's systems.

Leverage our Vulnerability Intelligence module to secure your systems now - get detailed insights on CVE-2024-37364. Book your demo today.


Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-38558 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options