CVE-2023-29128 Path traversal in SIMATIC Cloud Connect 7 CC712

Q: Is CVE-2023-29128 being exploited?

There is no known exploitation of CVE-2023-29128 in the wild and no public exploit code.

Q: How do I fix CVE-2023-29128?

No fix has been published for CVE-2023-29128 yet. Limit exposure of the affected software until one is available.

Low 3.8 Published 9 May 2023 Updated 28 Jan 2025

An authenticated privileged attacker can exploit a path traversal flaw in the web management upload feature to write arbitrary .db files on the device.

Exploited in the wild: Not known
Login needed: An administrator
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2023-29128?

CVE-2023-29128 is a low-severity path traversal vulnerability in Siemens SIMATIC Cloud Connect 7 CC712, published on 9 May 2023. An attacker needs administrator access to exploit it, with no action from the victim.

Official description

A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 < V2.1), SIMATIC Cloud Connect 7 CC716 (All versions >= V2.0 < V2.1). The filename in the upload feature of the web based management of the affected device is susceptible to a path traversal vulnerability. This could allow an authenticated privileged remote attacker to write any file with the extension `.db`.

Weakness: CWE-22

Which versions are affected by CVE-2023-29128?

It affects 2 products.

Products include Siemens 6gk1411-1ac00 Firmware, Siemens 6gk1411-5ac00 Firmware.

How do I fix CVE-2023-29128?

No fix has been published for CVE-2023-29128 yet. Limit exposure of the affected software until one is available.

Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.

Is CVE-2023-29128 being exploited?

There is no known exploitation of CVE-2023-29128 in the wild and no public exploit code.

Sources

Also known as GHSA-2447-76mr-7735.