VYPR
← All advisories
Unrated severityNVD Advisory· Published Oct 10, 2023· Updated Feb 27, 2025

CVE-2023-42796

CVE-2023-42796

Description

A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05.11), CP-8050 MASTER MODULE (All versions < CPCI85 V05.11). The web server of affected devices fails to properly sanitize user input for the /sicweb-ajax/tmproot/ endpoint.

This could allow an authenticated remote attacker to traverse directories on the system and download arbitrary files. By exploring active session IDs, the vulnerability could potentially be leveraged to escalate privileges to the administrator role.

Affected products

3
  • Siemens Foundation/CP-8031 MASTER MODULEllm-fuzzy3 versions
    < CPCI85 V05.11+ 2 more
    • (no CPE)range: < CPCI85 V05.11
    • (no CPE)range: All versions < CPCI85 V05.11
    • (no CPE)range: All versions < CPCI85 V05.11

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.