CVE-2021-45033: vulnerability in Siemens CP-8000 MASTER MODULE WITH I/O -25/+70°C
Published · Updated
Follow this CVE+ Monitor CP-8000 MASTER MODULE WITH I/O -25/+70°C+ Monitor CP-8000 MASTER MODULE WITH I/O -40/+70°C
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 0.9%
A vulnerability has been identified in CP-8000 MASTER MODULE WITH I/O -25/+70°C (All versions < V16.20), CP-8000 MASTER MODULE WITH I/O -40/+70°C (All versions < V16.20), CP-8021 MASTER MODULE (All versions < V16.20), CP-8022 MASTER MODULE WITH GPRS (All versions < V16.20). An undocumented debug port uses hard-coded default credentials. If this port is enabled by a privileged user, an attacker aware of the credentials could access an administrative debug shell on the affected device.
Affected products
Siemens · CP-8000 MASTER MODULE WITH I/O -25/+70°CSiemens · CP-8000 MASTER MODULE WITH I/O -40/+70°CSiemens · CP-8021 MASTER MODULESiemens · CP-8022 MASTER MODULE WITH GPRSRelated CVEs — Siemens CP-8000 MASTER MODULE WITH I/O -25/+70°C
In the same product, most dangerous first.