Lucene search
PRIOn knowledge basePRION:CVE-2023-28489HistoryApr 11, 2023 - 10:15 a.m.
Command injection
2023-04-1110:15:00
PRIOn knowledge base
www.prio-n.com
9
command injection
cp-8031
cp-8050
remote operation
arbitrary code execution
web server port 443/tcp
A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05), CP-8050 MASTER MODULE (All versions < CPCI85 V05). Affected devices are vulnerable to command injection via the web server port 443/tcp, if the parameter “Remote Operation” is enabled. The parameter is disabled by default.
The vulnerability could allow an unauthenticated remote attacker to perform arbitrary code execution on the device.
| CPE | Name | Operator | Version |
|---|---|---|---|
| cp-8031_firmware | eq | < cpci85-v5 | |
| cp-8050_firmware | eq | < cpci85-v5 |
Related
cnvd
cnvd
Siemens SICAM A8000 Command Injection Vulnerability
2023-04-16 00:00:00
ics
ics
Siemens CPCI85 Firmware of SICAM A8000 Devices
2023-04-13 12:00:00
nessus
nessus
cve
cve
CVE-2023-28489
2023-04-11 10:15:18
cvelist
cvelist
CVE-2023-28489
2023-04-11 09:03:04
nvd
nvd
CVE-2023-28489
2023-04-11 10:15:18
packetstorm
packetstorm
Siemens A8000 CP-8050 / CP-8031 Code Execution / Command Injection
2023-07-11 00:00:00