1. Home
  2. CVE Database
  3. CVE-2023-36380
CRITICAL · 9.8

CVE-2023-36380

A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05.11 (only with activated debug support)), CP-8050 MASTER MODULE (All versions < CPCI85 V05.11 (only with activate...

Vulnerability Description

A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05.11 (only with activated debug support)), CP-8050 MASTER MODULE (All versions < CPCI85 V05.11 (only with activated debug support)). The affected devices contain a hard-coded ID in the SSH `authorized_keys` configuration file. An attacker with knowledge of the corresponding private key could login to the device via SSH. Only devices with activated debug support are affected.

CVSS Score

9.8

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
SiemensCp-8050 Firmware< 05.11
SiemensCp-8050-
SiemensCp-8031 Firmware< 05.11
SiemensCp-8031-

Related Weaknesses (CWE)

CWE-798

References

FAQ

What is CVE-2023-36380?

CVE-2023-36380 is a vulnerability with a CVSS score of 9.8 (CRITICAL). A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05.11 (only with activated debug support)), CP-8050 MASTER MODULE (All versions < CPCI85 V05.11 (only with activate...

How severe is CVE-2023-36380?

CVE-2023-36380 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2023-36380?

Check the references section above for vendor advisories and patch information. Affected products include: Siemens Cp-8050 Firmware, Siemens Cp-8050, Siemens Cp-8031 Firmware, Siemens Cp-8031.