Skip to content
fr Sign in
5.3 Medium

CVE-2023-29106 A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 < V2.1), SIMATIC Cloud…

Description

A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 < V2.1), SIMATIC Cloud Connect 7 CC716 (All versions >= V2.0 < V2.1). The export endpoint is accessible via REST API without authentication. This could allow an unauthenticated remote attacker to download the files available via the endpoint.

Affected products and versions

Product Affected versions Fixed in
SIMATIC Cloud Connect 7 CC712 Versions not published
SIMATIC Cloud Connect 7 CC716 Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of SIMATIC Cloud Connect 7 CC712

The 9 CVEs of SIMATIC Cloud Connect 7 CC712 →
CVE-2023-28831 The OPC UA implementations (ANSI C and C++) in affected products contain an integer overflow vulnerability that could… 7.5 High CVE-2023-29128 A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 < V2.1), SIMATIC Cloud… 3.8 Low CVE-2023-29107 A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 < V2.1), SIMATIC Cloud… 5.3 Medium CVE-2023-29105 A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 < V2.1), SIMATIC Cloud… 5.9 Medium
Track this CVE