CVE-2023-36380 Hardcoded credentials in CP-8031 MASTER MODULE
Attackers with the private key can SSH into Siemens CP-8031/8050 modules if debug support is enabled, due to hardcoded authorized keys.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-36380?
CVE-2023-36380 is a critical vulnerability in Siemens CP-8031 MASTER MODULE, published on 10 Oct 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05.11 (only with activated debug support)), CP-8050 MASTER MODULE (All versions < CPCI85 V05.11 (only with activated debug support)). The affected devices contain a hard-coded ID in the SSH `authorized_keys` configuration file. An attacker with knowledge of the corresponding private key could login to the device via SSH. Only devices with activated debug support are affected.
Weakness: CWE-798
Which versions are affected by CVE-2023-36380?
It affects 2 products.
Products include Siemens Cp-8031 Firmware, Siemens Cp-8050 Firmware.
How do I fix CVE-2023-36380?
No fix has been published for CVE-2023-36380 yet. Limit exposure of the affected software until one is available.
Is CVE-2023-36380 being exploited?
There is no known exploitation of CVE-2023-36380 in the wild and no public exploit code.
Other vulnerabilities in Siemens CP-8031 MASTER MODULE
Sources
Also known as GHSA-mmpj-f59m-vxp4.