CVE-2023-42796

Description

A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05.11), CP-8050 MASTER MODULE (All versions < CPCI85 V05.11). The web server of affected devices fails to properly sanitize user input for the /sicweb-ajax/tmproot/ endpoint. This could allow an authenticated remote attacker to traverse directories on the system and download arbitrary files. By exploring active session IDs, the vulnerability could potentially be leveraged to escalate privileges to the administrator role.

References

Link	Tags
https://cert-portal.siemens.com/productcert/pdf/ssa-770890.pdf	patch vendor advisory

Frequently Asked Questions

What is the severity of CVE-2023-42796?: CVE-2023-42796 has been scored as a high severity vulnerability.
How to fix CVE-2023-42796?: To fix CVE-2023-42796, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2023-42796 being actively exploited in the wild?: As for now, there are no information to confirm that CVE-2023-42796 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2023-42796?: CVE-2023-42796 affects Siemens CP-8031 MASTER MODULE, Siemens CP-8050 MASTER MODULE.

This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.

Description

Category

CWE-22 – Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

References

Frequently Asked Questions