Cp-8050 Firmware vulnerabilities

3 known vulnerabilities in Cp-8050 Firmware from Siemens. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  CP-8031 MASTER MODULE: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2023-42796Oct 10, 2023Siemens

  A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05.11), CP-8050 MASTER MODULE (All versions < CPCI85 V05.11). The web server of affected devices fails to properly sanitize user input for the /sicweb-ajax/tmproot/ endpoint.

• 7.8 High severity

  CP-8031 MASTER MODULE: Use of Hard-coded Credentials

  CVE-2023-36380Oct 10, 2023Siemens

  A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05.11 (only with activated debug support)), CP-8050 MASTER MODULE (All versions < CPCI85 V05.11 (only with activated debug support)). The affected devices contain a hard-coded

• 9.8 Critical severity

  CP-8031 MASTER MODULE: Improper Neutralization of Special Elements used in a Command

  CVE-2023-28489Apr 11, 2023SiemensEPSS 2.84%

  A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05), CP-8050 MASTER MODULE (All versions < CPCI85 V05). Affected devices are vulnerable to command injection via the web server port 443/tcp, if the parameter “Remote Operatio