SIMATIC Cloud Connect 7 CC716 vulnerabilities

5 known vulnerabilities in SIMATIC Cloud Connect 7 CC716 from Siemens. 5 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  SIMATIC BRAUMAT: Integer Overflow or Wraparound

  CVE-2023-28831Sep 12, 2023SiemensEPSS 1.13%

  The OPC UA implementations (ANSI C and C++) in affected products contain an integer overflow vulnerability that could cause the application to run into an infinite loop during certificate validation. This could allow an unauthenticated remote attacker to creat

• 7.5 High severity

  SIMATIC Cloud Connect 7 CC712: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2023-29106May 9, 2023Siemens

  A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 < V2.1), SIMATIC Cloud Connect 7 CC716 (All versions >= V2.0 < V2.1). The export endpoint is accessible via REST API without authentication. This could allow an unauthen

• 7.5 High severity

  SIMATIC Cloud Connect 7 CC712: Missing Standardized Error Handling Mechanism

  CVE-2023-29105May 9, 2023Siemens

  A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 < V2.1), SIMATIC Cloud Connect 7 CC712 (All versions < V2.1), SIMATIC Cloud Connect 7 CC716 (All versions >= V2.0 < V2.1), SIMATIC Cloud Connect 7 CC716 (All versions <

• 7.6 High severity

  SIMATIC Cloud Connect 7 CC712: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2023-29104May 9, 2023Siemens

  A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 < V2.1), SIMATIC Cloud Connect 7 CC716 (All versions >= V2.0 < V2.1). The filename in the upload feature of the web based management of the affected device is susceptibl

• 7.2 High severity

  SIMATIC Cloud Connect 7 CC712: Improper Neutralization of Special Elements used in a Command

  CVE-2023-28832May 9, 2023SiemensEPSS 1.54%

  A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 < V2.1), SIMATIC Cloud Connect 7 CC716 (All versions >= V2.0 < V2.1). The web based management of affected devices does not properly validate user input, making it susce