Siemens SIMATIC PCS neo Session Management Vulnerability Allowing Session Hijacking

A session management vulnerability has been identified in Siemens SIMATIC PCS neo versions 4.1 (all versions prior to 4.1 Update 3) and 5.0 (all versions prior to 5.0 Update 1). The vulnerability arises because these versions do not properly invalidate user sessions upon logout. This flaw could enable a remote, unauthenticated attacker who has intercepted a session token to reuse a legitimate user's session even after the user has logged out.

Impact

Exploitation of this vulnerability could lead to session hijacking, allowing an attacker to impersonate a user by reusing their session token.

Remediation

Siemens has released updates for the affected products. Users are advised to update to the latest versions. For general security recommendations, Siemens suggests protecting network access to devices with appropriate measures and following the operational guidelines for Industrial Security.