CVE-2023-42797

Severity: high (CVSS 7.2 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-01-09 · updated 2026-06-17
Weakness: CWE-908

Description

A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05.20), CP-8050 MASTER MODULE (All versions < CPCI85 V05.20). The network configuration service of affected devices contains a flaw in the conversion of ipv4 addresses that could lead to an uninitialized variable being used in succeeding validation steps. By uploading specially crafted network configuration, an authenticated remote attacker could be able to inject commands that are executed on the device with root privileges during device startup.

Affected products

Siemens Sicam A8000 Cp-8031 Firmware: before 05.20 — fixed in 05.20
Siemens Sicam A8000 Cp-8050 Firmware: before 05.20 — fixed in 05.20

How to fix

Upgrade to a fixed version: Siemens Sicam A8000 Cp-8031 Firmware 05.20; Siemens Sicam A8000 Cp-8050 Firmware 05.20. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2023-42797 or the next vulnerability affects your stack