CVE-2024-46886: The web server of affected devices does not properly validate input that is used for a user redirection. This could allow an attacker to make the...
4.7
CVSS
Description
The web server of affected devices does not properly validate input that is used for a user redirection. This could allow an attacker to make the server redirect the legitimate user to an attacker-chosen URL. For a successful exploit, the legitimate user must actively click on an attacker-crafted link.
Classification
CVE ID: CVE-2024-46886
CVSS Base Severity: MEDIUM
CVSS Base Score: 4.7
Affected Products
Vendor: Siemens
Product: SIMATIC Drive Controller CPU 1504D TF
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.06% (probability of being exploited)
EPSS Percentile: 28.06% (scored less or equal to compared to others)
EPSS Date: 2025-02-03 (when was this score calculated)