Riskcovery

CVE-2023-33921

State
Published
Severity
6.8 Medium
Published
Jun 13, 2023
Updated
Feb 13, 2025
Reserved
May 23, 2023

Read the record on cve.org

Description

A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05), CP-8050 MASTER MODULE (All versions < CPCI85 V05). The affected devices contain an exposed UART console login interface. An attacker with direct physical access could try to bruteforce or crack the root password to login to the device.

Scores

CVSSScoreVectorSource
3.16.8 MediumCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:Csiemens

Weaknesses

  • CWE-749 Exposed Dangerous Method or Function

Affected Products

ProductVersions
CP-8031 MASTER MODULESiemens
  • All versions < CPCI85 V05Affected
CP-8050 MASTER MODULESiemens
  • All versions < CPCI85 V05Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.