CVE-2023-29107

Description

A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 < V2.1), SIMATIC Cloud Connect 7 CC716 (All versions >= V2.0 < V2.1). The export endpoint discloses some undocumented files. This could allow an unauthenticated remote attacker to gain access to additional information resources.

Traduire en français

Produits concernés

• Siemens SIMATIC Cloud Connect 7 CC712
• Siemens SIMATIC Cloud Connect 7 CC716
• Siemens 6gk1411-1ac00 firmware
• Siemens 6gk1411-5ac00 firmware

Scores CVSS

Faiblesses (CWE)

• CWE-552

Références

• https://cert-portal.siemens.com/productcert/pdf/ssa-555292.pdf PatchVendor Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-555292.pdf PatchVendor Advisory

Ailleurs

• NVD
• CVE.org
• CIRCL Vulnerability-Lookup
• CERT-FR
• GitHub Advisories