Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-36380

A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05.11 (only with activated debug support)), CP-8050 MASTER MODULE (All versions < CPCI85 V05.11 (only with activated debug support)). The affected devices contain a hard-coded ID in the SSH `authorized_keys` configuration file. An attacker with knowledge of the corresponding private key could login to the device via SSH. Only devices with activated debug support are affected.

Published

2023-10-10T11:15:11.817

Last Modified

2024-11-21T08:09:38.097

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 9.8 (CRITICAL)

Weaknesses
  • Type: Primary
    CWE-798
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System siemens cp-8050_firmware < 05.11 Yes
Hardware siemens cp-8050 - No
Operating System siemens cp-8031_firmware < 05.11 Yes
Hardware siemens cp-8031 - No
References