Siemens Opcenter X

An attacker could bypass authentication and gain full unauthorized access to Opcenter X, allowing them to modify production schedules, alter manufacturing parameters, or disrupt operations across connected systems.

Manufacturing operations teams and plant managers using Siemens Opcenter X for production planning, scheduling, and control should prioritize this update. Any facility relying on Opcenter X for operational technology across manufacturing lines, process control, or production management is at risk.

An attacker on the network can send a specially crafted request to the Opcenter X application without valid credentials, exploiting the token invalidation flaw to bypass authentication checks and access the application as an authorized user.