CVE-2024-46886 in SIMATIC Drive Controller CPU 1504D TFinfo

Zusammenfassung

von MITRE • 08.10.2024

The web server of affected devices does not properly validate input that is used for a user redirection. This could allow an attacker to make the server redirect the legitimate user to an attacker-chosen URL. For a successful exploit, the legitimate user must actively click on an attacker-crafted link.

Be aware that VulDB is the high quality source for vulnerability data.

Zuständig

Siemens

Reservieren

12.09.2024

Veröffentlichung

08.10.2024

Moderieren

akzeptiert

Eintrag

VDB-279609

CPE

bereit

EPSS

0.00093

KEV

nein

Aktivitäten

very low

Quellen

Do you need the next level of professionalism?

Upgrade your account now!