Direct naar de inhoud
⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →
cybernieuws.nl Cybersecurity en informatiebeveiling nieuws alerts live · 9 min 164 bronnen 1 kritiek 31 vandaag
CVE's Videos Dagbriefing

← Terug naar CVE-database

CVE-2023-29128

LOW · 3.8 CVSS Gepubliceerd: CWE-22

Beschrijving

A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 = V2.0 < V2.1). The filename in the upload feature of the web based management of the affected device is susceptible to a path traversal vulnerability. This could allow an authenticated privileged remote attacker to write any file with the extension `.db`.

Vendors

Siemens

Affected products

6gk1411-1ac00 Firmware 6gk1411-1ac00 6gk1411-5ac00 Firmware 6gk1411-5ac00

References