CVSS 3.1 Score 8.0 of 10 (high)


Published Nov 14, 2023
Updated: Nov 20, 2023
CWE ID 942


CVE-2023-46098 is a vulnerability in SIMATIC PCS neo (All versions < V4.1) that allows an attacker to exploit an overly permissive CORS policy when accessing the Information Server from affected products. This could lead to unwanted behavior being triggered by tricking a legitimate user. The vulnerability has a base severity rating of HIGH and a base score of 8.0 according to the Common Vulnerability Scoring System (CVSS) version 3.1. The impact includes high integrity and confidentiality impacts, with an availability impact also considered high. The affected products include 't1jDwt', 't1jDws', 'vd8urs', and 'kN6qcV'. It is important for organizations using these products to remediate the vulnerability as soon as possible to mitigate potential risks to their systems and data.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-46098 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options