Lucene search
PRIOn knowledge basePRION:CVE-2023-28832HistoryMay 09, 2023 - 1:15 p.m.
Command injection
2023-05-0913:15:00
PRIOn knowledge base
www.prio-n.com
3
simatic cloud connect
vulnerability
authenticated attacker
arbitrary code
root privileges
A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 < V2.1), SIMATIC Cloud Connect 7 CC716 (All versions >= V2.0 < V2.1). The web based management of affected devices does not properly validate user input, making it susceptible to command injection. This could allow an authenticated privileged remote attacker to execute arbitrary code with root privileges.
| CPE | Name | Operator | Version |
|---|---|---|---|
| 6gk1411-1ac00_firmware | eq | 2.0 | |
| 6gk1411-5ac00_firmware | eq | 2.0 |
Related
cvelist
cvelist
CVE-2023-28832
2023-05-09 11:51:28
cve
cve
CVE-2023-28832
2023-05-09 13:15:17
nvd
nvd
CVE-2023-28832
2023-05-09 13:15:17
ics
ics
Siemens SIMATIC Cloud Connect 7
2023-05-11 12:00:00