Aller au contenu
en Se connecter
7.2 Élevée

CVE-2023-28832 A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 < V2.1), SIMATIC Cloud…

Description

A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 < V2.1), SIMATIC Cloud Connect 7 CC716 (All versions >= V2.0 < V2.1). The web based management of affected devices does not properly validate user input, making it susceptible to command injection. This could allow an authenticated privileged remote attacker to execute arbitrary code with root privileges.

Produits et versions touchés

Produit Versions touchées Corrigé en
SIMATIC Cloud Connect 7 CC712 Versions non publiées
SIMATIC Cloud Connect 7 CC716 Versions non publiées

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de SIMATIC Cloud Connect 7 CC712

Les 9 CVE de SIMATIC Cloud Connect 7 CC712 →
CVE-2023-28831 The OPC UA implementations (ANSI C and C++) in affected products contain an integer overflow vulnerability that could… 7.5 Élevée CVE-2023-29128 A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 < V2.1), SIMATIC Cloud… 3.8 Faible CVE-2023-29107 A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 < V2.1), SIMATIC Cloud… 5.3 Moyenne CVE-2023-29106 A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 < V2.1), SIMATIC Cloud… 5.3 Moyenne
Suivre cette CVE