Cp 8031 Firmware
Approved changes feed: RSS · Atom
cpe:2.3:o:siemens:cp-8031_firmware:*:*:*:*:cpci85:*:*:*
part: o version: * update: *
| Vendor | Siemens (4bd2a91b-02ad-5c3d-b25f-70697e0c9d7f) |
|---|---|
| Product | Cp 8031 Firmware (92accdbc-881c-5cf6-a288-24fdbe7461c2) |
| Edition | * |
| Language | * |
| Software edition | cpci85 |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-42796 |
vulnerable | 2026-06-08 06:11:09.487241 |
Details available
HIGH (7.5)
A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05.11), CP-8050 MASTER MODULE (All versions < CPCI85 V05.11). The web server of affected devices fails to properly sanitize user input for the /sicweb-ajax/tmproot/ endpoint.
This could allow an authenticated remote attacker to traverse directories on the system and download arbitrary files. By exploring active session IDs, the vulnerability could potentially be leveraged to escalate privileges to the administrator role.
Published: 2023-10-10T10:21:26.106Z
Updated: 2025-02-27T20:46:01.630Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-36380 |
vulnerable | 2026-06-08 06:08:11.232414 |
Details available
CRITICAL (9.8)
A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05.11 (only with activated debug support)), CP-8050 MASTER MODULE (All versions < CPCI85 V05.11 (only with activated debug support)). The affected devices contain a hard-coded ID in the SSH `authorized_keys` configuration file. An attacker with knowledge of the corresponding private key could login to the device via SSH. Only devices with activated debug support are affected.
Published: 2023-10-10T10:21:21.786Z
Updated: 2025-02-27T20:46:08.107Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.