Skip to content
fr Sign in
7.2 High

CVE-2023-28832 A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 < V2.1), SIMATIC Cloud…

Description

A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 < V2.1), SIMATIC Cloud Connect 7 CC716 (All versions >= V2.0 < V2.1). The web based management of affected devices does not properly validate user input, making it susceptible to command injection. This could allow an authenticated privileged remote attacker to execute arbitrary code with root privileges.

Affected products and versions

Product Affected versions Fixed in
SIMATIC Cloud Connect 7 CC712 Versions not published
SIMATIC Cloud Connect 7 CC716 Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of SIMATIC Cloud Connect 7 CC712

The 9 CVEs of SIMATIC Cloud Connect 7 CC712 →
CVE-2023-28831 The OPC UA implementations (ANSI C and C++) in affected products contain an integer overflow vulnerability that could… 7.5 High CVE-2023-29128 A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 < V2.1), SIMATIC Cloud… 3.8 Low CVE-2023-29107 A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 < V2.1), SIMATIC Cloud… 5.3 Medium CVE-2023-29106 A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 < V2.1), SIMATIC Cloud… 5.3 Medium
Track this CVE