Siemens CP-8050 -
Approved changes feed: RSS · Atom
cpe:2.3:h:siemens:cp-8050:-:*:*:*:*:*:*:*
part: h version: - update: *
| Vendor | Siemens (4bd2a91b-02ad-5c3d-b25f-70697e0c9d7f) |
|---|---|
| Product | Cp 8050 (46489fe1-2112-549f-9d6e-ebcbd67dd36f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-42796 |
not_vulnerable | 2026-06-08 06:11:09.486431 |
Details available
HIGH (7.5)
A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05.11), CP-8050 MASTER MODULE (All versions < CPCI85 V05.11). The web server of affected devices fails to properly sanitize user input for the /sicweb-ajax/tmproot/ endpoint.
This could allow an authenticated remote attacker to traverse directories on the system and download arbitrary files. By exploring active session IDs, the vulnerability could potentially be leveraged to escalate privileges to the administrator role.
Published: 2023-10-10T10:21:26.106Z
Updated: 2025-02-27T20:46:01.630Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-36380 |
not_vulnerable | 2026-06-08 06:08:11.231758 |
Details available
CRITICAL (9.8)
A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05.11 (only with activated debug support)), CP-8050 MASTER MODULE (All versions < CPCI85 V05.11 (only with activated debug support)). The affected devices contain a hard-coded ID in the SSH `authorized_keys` configuration file. An attacker with knowledge of the corresponding private key could login to the device via SSH. Only devices with activated debug support are affected.
Published: 2023-10-10T10:21:21.786Z
Updated: 2025-02-27T20:46:08.107Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-28489 |
not_vulnerable | 2026-06-08 06:01:10.975254 |
Details available
CRITICAL (9.8)
A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05), CP-8050 MASTER MODULE (All versions < CPCI85 V05). Affected devices are vulnerable to command injection via the web server port 443/tcp, if the parameter “Remote Operation” is enabled. The parameter is disabled by default.
The vulnerability could allow an unauthenticated remote attacker to perform arbitrary code execution on the device.
Published: 2023-04-11T09:03:04.302Z
Updated: 2025-02-13T16:48:43.223Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.