CVE-2023-29103 Hardcoded credentials in SIMATIC Cloud Connect 7 CC712

Q: Is CVE-2023-29103 being exploited?

There is no known exploitation of CVE-2023-29103 in the wild and no public exploit code.

Q: How do I fix CVE-2023-29103?

No fix has been published for CVE-2023-29103 yet. Limit exposure of the affected software until one is available.

Medium 4.3 Published 9 May 2023 Updated 28 Jan 2025

An authenticated attacker can access protected diagnostic data due to a hard-coded password in Siemens SIMATIC Cloud Connect devices.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2023-29103?

CVE-2023-29103 is a medium-severity vulnerability in Siemens SIMATIC Cloud Connect 7 CC712, published on 9 May 2023. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 < V2.1), SIMATIC Cloud Connect 7 CC712 (All versions < V2.1), SIMATIC Cloud Connect 7 CC716 (All versions >= V2.0 < V2.1), SIMATIC Cloud Connect 7 CC716 (All versions < V2.1). The affected device uses a hard-coded password to protect the diagnostic files. This could allow an authenticated attacker to access protected data.

Weakness: CWE-259

Which versions are affected by CVE-2023-29103?

It affects 2 products.

Products include Siemens 6gk1411-1ac00 Firmware, Siemens 6gk1411-5ac00 Firmware.

How do I fix CVE-2023-29103?

No fix has been published for CVE-2023-29103 yet. Limit exposure of the affected software until one is available.

Is CVE-2023-29103 being exploited?

There is no known exploitation of CVE-2023-29103 in the wild and no public exploit code.

Sources

Also known as GHSA-528m-3jqm-fvp2.