A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05), CP-8050 MASTER MODULE (All versions < CPCI85 V05). The affected devices contain an exposed UART console login interface. An attacker with direct physical access could try to bruteforce or crack the root password to login to the device.
References
Configurations
History
21 Nov 2024, 08:06
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://packetstormsecurity.com/files/173370/Siemens-A8000-CP-8050-CP-8031-Code-Execution-Command-Injection.html - | |
| References | () http://seclists.org/fulldisclosure/2023/Jul/14 - | |
| References | () https://cert-portal.siemens.com/productcert/pdf/ssa-731916.pdf - Patch, Vendor Advisory |
11 Jul 2023, 18:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
07 Jul 2023, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
29 Jun 2023, 20:12
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:siemens:cpci85_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:siemens:cp-8031_master_module:-:*:*:*:*:*:*:* cpe:2.3:h:siemens:cp-8050_master_module:-:*:*:*:*:*:*:* |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.8 |
| References | (MISC) https://cert-portal.siemens.com/productcert/pdf/ssa-731916.pdf - Patch, Vendor Advisory | |
| CWE | NVD-CWE-Other |
13 Jun 2023, 09:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-06-13 09:15
Updated : 2024-11-21 08:06
NVD link : CVE-2023-33921
Mitre link : CVE-2023-33921
CVE.ORG link : CVE-2023-33921
JSON object : View
Products Affected
siemens
- cpci85_firmware
- cp-8050_master_module
- cp-8031_master_module
CWE