A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05), CP-8050 MASTER MODULE (All versions < CPCI85 V05). The affected devices contain the hash of the root password in a hard-coded form, which could be exploited for UART console login to the device. An attacker with direct physical access could exploit this vulnerability.
References
Configurations
History
21 Nov 2024, 08:06
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://packetstormsecurity.com/files/173370/Siemens-A8000-CP-8050-CP-8031-Code-Execution-Command-Injection.html - | |
| References | () http://seclists.org/fulldisclosure/2023/Jul/14 - | |
| References | () https://cert-portal.siemens.com/productcert/pdf/ssa-731916.pdf - Patch, Vendor Advisory |
11 Jul 2023, 18:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
07 Jul 2023, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
29 Jun 2023, 20:14
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Siemens cp-8031 Master Module
Siemens cp-8050 Master Module Siemens cpci85 Firmware Siemens |
|
| References | (MISC) https://cert-portal.siemens.com/productcert/pdf/ssa-731916.pdf - Patch, Vendor Advisory | |
| CWE | CWE-798 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.8 |
| CPE | cpe:2.3:o:siemens:cpci85_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:siemens:cp-8050_master_module:-:*:*:*:*:*:*:* cpe:2.3:h:siemens:cp-8031_master_module:-:*:*:*:*:*:*:* |
13 Jun 2023, 09:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-06-13 09:15
Updated : 2024-11-21 08:06
NVD link : CVE-2023-33920
Mitre link : CVE-2023-33920
CVE.ORG link : CVE-2023-33920
JSON object : View
Products Affected
siemens
- cpci85_firmware
- cp-8031_master_module
- cp-8050_master_module
CWE
CWE-798
Use of Hard-coded Credentials