Vulnerability · Published Jun 13, 2023 · Assigned by siemens
CVE-2023-33921
Medium 6.8
In plain English
A medium-severity security flaw in CP-8031 MASTER MODULE from Siemens. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 34% of all known vulnerabilities).
Severity (CVSS 3.1)6.8Medium
Exploit odds (30 days)0.4%top 66.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05), CP-8050 MASTER MODULE (All versions < CPCI85 V05). The affected devices contain an exposed UART console login interface. An attacker with direct physical access could try to bruteforce or crack the root password to login to the device.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Siemens | CP-8031 MASTER MODULE | All versions < CPCI85 V05 |
| Siemens | CP-8050 MASTER MODULE | All versions < CPCI85 V05 |
Weakness: CWE-749 · Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C