A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05.11), CP-8050 MASTER MODULE (All versions < CPCI85 V05.11). The web server of affected devices fails to properly sanitize user input for the /sicweb-ajax/tmproot/ endpoint.
This could allow an authenticated remote attacker to traverse directories on the system and download arbitrary files. By exploring active session IDs, the vulnerability could potentially be leveraged to escalate privileges to the administrator role.
References
| Link | Resource |
|---|---|
| https://cert-portal.siemens.com/productcert/pdf/ssa-770890.pdf | Patch Vendor Advisory |
| https://cert-portal.siemens.com/productcert/pdf/ssa-770890.pdf | Patch Vendor Advisory |
Configurations
History
21 Nov 2024, 08:23
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://cert-portal.siemens.com/productcert/pdf/ssa-770890.pdf - Patch, Vendor Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
16 Oct 2023, 18:36
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Siemens cp-8031
Siemens Siemens cp-8050 Firmware Siemens cp-8031 Firmware Siemens cp-8050 |
|
| References | (MISC) https://cert-portal.siemens.com/productcert/pdf/ssa-770890.pdf - Patch, Vendor Advisory | |
| CPE | cpe:2.3:h:siemens:cp-8050:-:*:*:*:*:*:*:* cpe:2.3:o:siemens:cp-8031_firmware:*:*:*:*:cpci85:*:*:* cpe:2.3:h:siemens:cp-8031:-:*:*:*:*:*:*:* cpe:2.3:o:siemens:cp-8050_firmware:*:*:*:*:cpci85:*:*:* |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.8 |
10 Oct 2023, 11:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-10-10 11:15
Updated : 2024-11-21 08:23
NVD link : CVE-2023-42796
Mitre link : CVE-2023-42796
CVE.ORG link : CVE-2023-42796
JSON object : View
Products Affected
siemens
- cp-8031
- cp-8050
- cp-8050_firmware
- cp-8031_firmware
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')