6Gk1411 5Ac00 Firmware
Approved changes feed: RSS · Atom
cpe:2.3:o:siemens:6gk1411-5ac00_firmware:2.0:*:*:*:*:*:*:*
part: o version: 2.0 update: *
| Vendor | Siemens (4bd2a91b-02ad-5c3d-b25f-70697e0c9d7f) |
|---|---|
| Product | 6Gk1411 5Ac00 Firmware (09664d3f-b2e0-586f-90ea-80fe2b06ee76) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-29128 |
vulnerable | 2026-06-08 06:02:38.753360 |
Details available
LOW (3.8)
A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 < V2.1), SIMATIC Cloud Connect 7 CC716 (All versions >= V2.0 < V2.1). The filename in the upload feature of the web based management of the affected device is susceptible to a path traversal vulnerability. This could allow an authenticated privileged remote attacker to write any file with the extension `.db`.
Published: 2023-05-09T11:51:35.346Z
Updated: 2025-01-28T18:36:17.506Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-29107 |
vulnerable | 2026-06-08 06:02:38.708533 |
Details available
MEDIUM (5.3)
A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 < V2.1), SIMATIC Cloud Connect 7 CC716 (All versions >= V2.0 < V2.1). The export endpoint discloses some undocumented files. This could allow an unauthenticated remote attacker to gain access to additional information resources.
Published: 2023-05-09T11:51:34.269Z
Updated: 2025-01-28T18:37:13.123Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-29106 |
vulnerable | 2026-06-08 06:02:38.707892 |
Details available
MEDIUM (5.3)
A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 < V2.1), SIMATIC Cloud Connect 7 CC716 (All versions >= V2.0 < V2.1). The export endpoint is accessible via REST API without authentication. This could allow an unauthenticated remote attacker to download the files available via the endpoint.
Published: 2023-05-09T11:51:33.140Z
Updated: 2025-01-28T18:38:53.788Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-29104 |
vulnerable | 2026-06-08 06:02:38.706156 |
Details available
MEDIUM (6)
A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 < V2.1), SIMATIC Cloud Connect 7 CC716 (All versions >= V2.0 < V2.1). The filename in the upload feature of the web based management of the affected device is susceptible to a path traversal vulnerability. This could allow an authenticated privileged remote attacker to overwrite any file the Linux user `ccuser` has write access to, or to download any file the Linux user `ccuser` has read-only access to.
Published: 2023-05-09T11:51:30.950Z
Updated: 2025-01-28T18:41:04.237Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-28832 |
vulnerable | 2026-06-08 06:02:36.484916 |
Details available
HIGH (7.2)
A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 < V2.1), SIMATIC Cloud Connect 7 CC716 (All versions >= V2.0 < V2.1). The web based management of affected devices does not properly validate user input, making it susceptible to command injection. This could allow an authenticated privileged remote attacker to execute arbitrary code with root privileges.
Published: 2023-05-09T11:51:28.740Z
Updated: 2025-01-28T18:42:40.340Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.