Lucene search
PRIOn knowledge basePRION:CVE-2023-36380HistoryOct 10, 2023 - 11:15 a.m.
Hardcoded credentials
2023-10-1011:15:00
PRIOn knowledge base
www.prio-n.com
3
hardcoded credentials
vulnerability
cp-8031
cp-8050
ssh
authorized_keys
configuration
debug support
A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05.11 (only with activated debug support)), CP-8050 MASTER MODULE (All versions < CPCI85 V05.11 (only with activated debug support)). The affected devices contain a hard-coded ID in the SSH authorized_keys configuration file. An attacker with knowledge of the corresponding private key could login to the device via SSH. Only devices with activated debug support are affected.
| CPE | Name | Operator | Version |
|---|---|---|---|
| cp-8031_firmware | lt | 05.11 | |
| cp-8050_firmware | lt | 05.11 |
Related
cve
cve
CVE-2023-36380
2023-10-10 11:15:11
nvd
nvd
CVE-2023-36380
2023-10-10 11:15:11
ics
ics
Siemens CPCI85 Firmware of SICAM A8000 Devices
2023-10-12 12:00:00
nessus
nessus
Siemens CP Use of Hard-coded Credentials (CVE-2023-36380)
2023-10-17 00:00:00
cnvd
cnvd
cvelist
cvelist
CVE-2023-36380
2023-10-10 10:21:21