cveboard RSS feed

CVE-2023-42796

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2023
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05.11), CP-8050 MASTER MODULE (All versions < CPCI85 V05.11). The web server of affected devices fails to properly sanitize user input for the /sicweb-ajax/tmproot/ endpoint. This could allow an authenticated remote attacker to traverse directories on the system and download arbitrary files. By exploring active session IDs, the vulnerability could potentially be leveraged to escalate privileges to the administrator role.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

CP-8031 MASTER MODULE

Vendor
Siemens
Product
CP-8031 MASTER MODULE
Platforms
Unknown
Default status
unknown
CP-8031 MASTER MODULE · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
All versions < CPCI85 V05.11affectedUnavailableUnavailableUnavailableNone listed

CP-8050 MASTER MODULE

Vendor
Siemens
Product
CP-8050 MASTER MODULE
Platforms
Unknown
Default status
unknown
CP-8050 MASTER MODULE · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
All versions < CPCI85 V05.11affectedUnavailableUnavailableUnavailableNone listed