Lucene search

[email protected]CVE-2021-46304

HistoryAug 10, 2022 - 12:15 p.m.

CVE-2021-46304

2022-08-1012:15:11

CWE-284

[email protected]

web.nvd.nist.gov

cve-2021-46304

vulnerability

unauthorized access

cp-8000

cp-8021

cp-8022

web server

debug information

network topology

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.5%

JSON

A vulnerability has been identified in CP-8000 MASTER MODULE WITH I/O -25/+70°C (All versions), CP-8000 MASTER MODULE WITH I/O -40/+70°C (All versions), CP-8021 MASTER MODULE (All versions), CP-8022 MASTER MODULE WITH GPRS (All versions). The component allows to activate a web server module which provides unauthenticated access to its web pages. This could allow an attacker to retrieve debug-level information from the component such as internal network topology or connected systems.

Affected configurations

NVD

Node

siemenscp-8021_master_module_firmware

AND

siemenscp-8021_master_moduleMatch-

Node

siemenscp-8000_master_module_with_i\/o_-25\/\+70_firmware

AND

siemenscp-8000_master_module_with_i\/o_-25\/\+70Match-

Node

siemenscp-8000_master_module_with_i\/o_-40\/\+70_firmware

AND

siemenscp-8000_master_module_with_i\/o_-40\/\+70Match-

Node

siemenscp-8022_master_module_with_gprs_firmware

AND

siemenscp-8022_master_module_with_gprsMatch-

CPENameOperatorVersion
siemens:cp-8021_master_module_firmwaresiemens cp-8021 master module firmwareeq*

CPE	Name	Operator	Version
siemens:cp-8021_master_module_firmware	siemens cp-8021 master module firmware	eq	*

CNA Affected

[
  {
    "product": "CP-8000 MASTER MODULE WITH I/O -25/+70°C",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "product": "CP-8000 MASTER MODULE WITH I/O -40/+70°C",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "product": "CP-8021 MASTER MODULE",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "product": "CP-8022 MASTER MODULE WITH GPRS",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  }
]