Lucene search
+L

CVE-2023-28489

🗓️ 11 Apr 2023 09:03:04Reported by siemensType 
cve
 cve
🔗 web.nvd.nist.gov👁 183 Views🌐 WEB

Vulnerability in CP-8031 and CP-8050 Master Modules allows remote code executio

Related
Detection
Affected
Refs
Paths
ReporterTitlePublishedViews
Family
bdu_fstec
BDU FSTEC
Siemens SICAM CP-8031/CP-8050 Command Execution
13 Apr 202300:00
–bdu_fstec
circl
Circl
CVE-2023-28489
11 Apr 202314:23
–circl
cnnvd
CNNVD
Siemens SICAM A8000 command injection vulnerability
11 Apr 202300:00
–cnnvd
cnvd
CNVD
Siemens SICAM A8000 Command Injection Vulnerability
16 Apr 202300:00
–cnvd
cvelist
Cvelist
CVE-2023-28489
11 Apr 202309:03
–cvelist
euvd
EUVD
EUVD-2023-32159
3 Oct 202520:07
–euvd
ics
ICS
Siemens CPCI85 Firmware of SICAM A8000 Devices
11 Apr 202300:00
–ics
ncsc
NCSC
Vulnerabilities fixed in Siemens products
11 Apr 202300:00
–ncsc
nvd
NVD
CVE-2023-28489
11 Apr 202310:15
–nvd
osv_cve
osv_cve
CVE-2023-28489
11 Apr 202310:15
–osv_cve
Rows per page
NVD
Vulners
Node
AND
Node
AND
[
  {
    "vendor": "Siemens",
    "product": "CP-8031 MASTER MODULE",
    "versions": [
      {
        "version": "All versions < CPCI85 V05",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "CP-8050 MASTER MODULE",
    "versions": [
      {
        "version": "All versions < CPCI85 V05",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  }
]
ParameterPositionPathDescriptionCWE
p0request body/sicweb-ajax/rtum85/cviewAuthenticated Command Injection via the 'LAN port group' field in the 'Ethernet Packet Capture' section. The payload is sent as an XML value within the request body.CWE-77

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 05:47Current
9.8Critical risk
Vulners AI Score9.8
CVSS 3.19.8
EPSS0.02836
SSVC
183