CVE-2023-42797
Medium
Description
A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05.20), CP-8050 MASTER MODULE (All versions < CPCI85 V05.20). The network configuration service of affected devices contains a flaw in the conversion of ipv4 addresses that could lead to an uninitialized variable being used in succeeding validation steps. By uploading specially crafted network configuration, an authenticated remote attacker could be able to inject commands that are executed on the device with root privileges during device startup.
SeverityMedium
CVSS6.6
Exploit probability—
ProductSiemens Sicam A8000 Cp-8050 Firmware
PublishedJan 9, 2024
First seenJan 9, 2024
Weakness typeCWE-908CWE-908
How to fix
Update
- siemens sicam_a8000_cp-8050_firmware05.20 or later
- siemens sicam_a8000_cp-8031_firmware05.20 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| siemens sicam_a8000_cp-8050_firmware | v < 05.20 | 05.20 |
| siemens sicam_a8000_cp-8031_firmware | v < 05.20 | 05.20 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.