VULNERABILITY INTELLIGENCE
CVE-2024-46887
CVSS score5.3 MEDIUM
EPSS probability0.56%
CISA KEVNot currently listed
Published2024-10-08
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Description
The web server of affected devices do not properly authenticate user request to the '/ClientArea/RuntimeInfoData.mwsl' endpoint. This could allow an unauthenticated remote attacker to gain knowledge about current actual and configured maximum cycle times as well as about configured maximum communication load.
Weakness classification
- productcert@siemens.com: CWE-288