CVE-2024-46886

Name of the Vulnerable Software and Affected Versions SIMATICS7-1500 and S7-1200 CPU family (affected versions not specified)

Description The web server of affected devices does not properly validate input used for user redirection, allowing an attacker to redirect a legitimate user to an attacker-chosen URL. For a successful exploit, the legitimate user must actively click on an attacker-crafted link. The issue is related to the web server's ability to redirect users to unreliable sites, potentially allowing a remote attacker to redirect users to arbitrary URLs.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.