Direct naar de inhoud
⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →
cybernieuws.nl Cybersecurity en informatiebeveiling nieuws alerts live · net nu 165 bronnen 1 kritiek 18 vandaag
CVE's Videos Dagbriefing

← Terug naar CVE-database

CVE-2023-29106

MEDIUM · 5.3 CVSS Gepubliceerd: CWE-200

Beschrijving

A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 = V2.0 < V2.1). The export endpoint is accessible via REST API without authentication. This could allow an unauthenticated remote attacker to download the files available via the endpoint.

Vendors

Siemens

Affected products

6gk1411-1ac00 Firmware 6gk1411-1ac00 6gk1411-5ac00 Firmware 6gk1411-5ac00

References