High ICSA-23-131-04 7 CVEs

Siemens SIMATIC Cloud Connect 7

Published May 9, 2023 · Updated May 6, 2025 · Revision 2

Vendor: Siemens Product: SIMATIC Cloud Connect 7 CC712 (6GK1411-1AC00) Product: SIMATIC Cloud Connect 7 CC716 (6GK1411-5AC00)

Summary

SIMATIC Cloud Connect 7 contains multiple vulnerabilities that could allow an attacker to impact its confidentiality, integrity and availability.

Siemens has released updates for the affected products and recommends to update to the latest versions.

Vulnerabilities 7

High 7.2

CVE-2023-28832

A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 < V2.1), SIMATIC Cloud Conne…

Siemens SIMATIC Cloud Connect 7 CC716 SIMATIC Cloud Connect 7 CC712 ICS / OT

May 9, 2023
Medium 6.0

CVE-2023-29104

A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 < V2.1), SIMATIC Cloud Conne…

Siemens SIMATIC Cloud Connect 7 CC716 SIMATIC Cloud Connect 7 CC712 ICS / OT

May 9, 2023
Medium 5.9

CVE-2023-29105

A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 < V2.1), SIMATIC Cloud Conne…

Siemens SIMATIC Cloud Connect 7 CC716 SIMATIC Cloud Connect 7 CC712 ICS / OT

May 9, 2023
Medium 5.3

CVE-2023-29106

A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 < V2.1), SIMATIC Cloud Conne…

Siemens SIMATIC Cloud Connect 7 CC712 SIMATIC Cloud Connect 7 CC716 ICS / OT

May 9, 2023
Medium 5.3

CVE-2023-29107

A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 < V2.1), SIMATIC Cloud Conne…

Siemens SIMATIC Cloud Connect 7 CC716 SIMATIC Cloud Connect 7 CC712 ICS / OT

May 9, 2023
Medium 4.3

CVE-2023-29103

A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 < V2.1), SIMATIC Cloud Conne…

Siemens SIMATIC Cloud Connect 7 CC712 SIMATIC Cloud Connect 7 CC716 ICS / OT

May 9, 2023
Low 3.8

CVE-2023-29128

A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 < V2.1), SIMATIC Cloud Conne…

Siemens SIMATIC Cloud Connect 7 CC712 SIMATIC Cloud Connect 7 CC716 ICS / OT

May 9, 2023

Revision history

2025-05-06 #2
Revision - Fixing typos
2023-05-09 #1
Publication Date

References

SSA-555292: Security Vulnerabilities Fixed in SIMATIC Cloud Connect 7 V2.1 - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-555292.html
SSA-555292: Security Vulnerabilities Fixed in SIMATIC Cloud Connect 7 V2.1 - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-555292.pdf
SSA-555292: Security Vulnerabilities Fixed in SIMATIC Cloud Connect 7 V2.1 - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-555292.txt
ICS Advisory ICSA-23-131-04 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-23-131-04
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B