CVE-2023-28489: Command Injection
A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05), CP-8050 MASTER MODULE (All versions < CPCI85 V05). Affected devices are vulnerable to command injection via the web server port 443/tcp, if the parameter “Remote Operation” is enabled. The parameter is disabled by default. The vulnerability could allow an unauthenticated remote attacker to perform arbitrary code execution on the device.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-28489?
The severity of CVE-2023-28489 is critical with a CVSS score of 9.8.
Which devices are affected by CVE-2023-28489?
CP-8031 MASTER MODULE (All versions < CPCI85 V05) and CP-8050 MASTER MODULE (All versions < CPCI85 V05) are affected.
What is the vulnerability in CVE-2023-28489?
The vulnerability in CVE-2023-28489 is command injection via the web server port 443/tcp if the parameter "Remote Operation" is enabled.
How can I fix CVE-2023-28489?
You can fix CVE-2023-28489 by applying the latest firmware update provided by Siemens.
Are Siemens Cp-8031 and Cp-8050 devices vulnerable to CVE-2023-28489?
Siemens Cp-8031 and Cp-8050 devices are vulnerable to CVE-2023-28489 if they have versions older than CPCI85 V05.