CVE-2023-28832highCWE-77

CVE-2023-28832: high-severity vulnerability in Siemens SIMATIC Cloud Connect 7 CC712

Published · Updated

Follow this CVE+ Monitor SIMATIC Cloud Connect 7 CC712+ Monitor SIMATIC Cloud Connect 7 CC716

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.2epss 1.5%
A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 < V2.1), SIMATIC Cloud Connect 7 CC716 (All versions >= V2.0 < V2.1). The web based management of affected devices does not properly validate user input, making it susceptible to command injection. This could allow an authenticated privileged remote attacker to execute arbitrary code with root privileges.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
Affected products
Siemens · SIMATIC Cloud Connect 7 CC712Siemens · SIMATIC Cloud Connect 7 CC716
Related CVEs — Siemens SIMATIC Cloud Connect 7 CC712

In the same product, most dangerous first.

CVE-2023-28831HIGHCVE-2023-28831EPSS 1.1%CVE-2023-29106MEDIUMCVE-2023-29106EPSS 0.7%CVE-2023-29104MEDIUMCVE-2023-29104EPSS 0.7%CVE-2023-29128LOWCVE-2023-29128EPSS 0.7%CVE-2023-29107MEDIUMCVE-2023-29107EPSS 0.6%CVE-2023-29105MEDIUMCVE-2023-29105EPSS 0.6%