High SSA-731916 3 CVEs

SSA-731916: Multiple Vulnerabilities in CPCI85 Firmware of SICAM A8000 Devices

Published Jun 13, 2023 · Updated Jun 13, 2023

Vendor: Siemens Product: CP-8031 MASTER MODULE (6MF2803-1AA00) Product: CP-8050 MASTER MODULE (6MF2805-0AA00)

Summary

The CPCI85 firmware of SICAM A8000 CP-8031 and CP-8050 is affected by multiple vulnerabilities such as authenticated remote command injection, exposure of serial UART interface, and hard coded credentials (for UART login).

Siemens has released updates for the affected products and recommends to update to the latest versions.

Vulnerabilities 3

High 7.2

CVE-2023-33919 EPSS 48%

A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05), CP-8050 MASTER MODULE (All ve…

Siemens CP-8031 MASTER MODULE CP-8050 MASTER MODULE ICS / OT

Jun 13, 2023
Medium 6.8

CVE-2023-33920

A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05), CP-8050 MASTER MODULE (All ve…

Siemens CP-8050 MASTER MODULE CP-8031 MASTER MODULE ICS / OT

Jun 13, 2023
Medium 6.8

CVE-2023-33921

A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05), CP-8050 MASTER MODULE (All ve…

Siemens CP-8050 MASTER MODULE CP-8031 MASTER MODULE ICS / OT

Jun 13, 2023

Revision history

2023-06-13 #1
Publication Date

References

SSA-731916: Multiple Vulnerabilities in CPCI85 Firmware of SICAM A8000 Devices - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-731916.html
SSA-731916: Multiple Vulnerabilities in CPCI85 Firmware of SICAM A8000 Devices - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-731916.pdf
SSA-731916: Multiple Vulnerabilities in CPCI85 Firmware of SICAM A8000 Devices - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-731916.txt