← CVE Intelligence

CVE-2023-28832

Siemens / SIMATIC Cloud Connect 7 CC712 PUBLISHED

Description (CNA)

A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 < V2.1), SIMATIC Cloud Connect 7 CC716 (All versions >= V2.0 < V2.1). The web based management of affected devices does not properly validate user input, making it susceptible to command injection. This could allow an authenticated privileged remote attacker to execute arbitrary code with root privileges.

Affected (CNA)

Vendor / productVersions
Siemens / SIMATIC Cloud Connect 7 CC712affected All versions >= V2.0 < V2.1
Siemens / SIMATIC Cloud Connect 7 CC716affected All versions >= V2.0 < V2.1

CWE

CWE-77

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.