medium4.9
CVE-2023-44318
Affected devices use a hardcoded key to obfuscate the configuration backup that an administrator can export from the device.
Impact
Affected devices use a hardcoded key to obfuscate the configuration backup that an administrator can export from the device. This could allow an authenticated attacker with administrative privileges or an attacker that obtains a configuration backup to extract configuration information from the exported file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Siemens | 6gk5205-3bb00-2ab2 Firmware | before 4.5 |
| Siemens | 6gk5205-3bb00-2tb2 Firmware | before 4.5 |
| Siemens | 6gk5205-3bd00-2tb2 Firmware | before 4.5 |
| Siemens | 6gk5205-3bd00-2ab2 Firmware | before 4.5 |
| Siemens | 6gk5205-3bf00-2tb2 Firmware | through 4.5 |
| Siemens | 6gk5205-3bf00-2ab2 Firmware | before 4.5 |
| Siemens | 6gk5208-0ba00-2tb2 Firmware | before 4.5 |
| Siemens | 6gk5208-0ba00-2ab2 Firmware | before 4.5 |
| Siemens | 6gk5213-3bd00-2tb2 Firmware | before 4.5 |
| Siemens | 6gk5213-3bd00-2ab2 Firmware | before 4.5 |
| Siemens | 6gk5213-3bb00-2tb2 Firmware | before 4.5 |
| Siemens | 6gk5213-3bb00-2ab2 Firmware | before 4.5 |
Weakness classification
References
- NVD record
- CVE.org record
- https://cert-portal.siemens.com/productcert/html/ssa-180704.html
- https://cert-portal.siemens.com/productcert/html/ssa-353002.html
- https://cert-portal.siemens.com/productcert/html/ssa-690517.html
- https://cert-portal.siemens.com/productcert/pdf/ssa-180704.pdf
- https://cert-portal.siemens.com/productcert/pdf/ssa-699386.pdf
- https://cert-portal.siemens.com/productcert/html/ssa-180704.html
- https://cert-portal.siemens.com/productcert/html/ssa-353002.html
- https://cert-portal.siemens.com/productcert/html/ssa-690517.html
- https://cert-portal.siemens.com/productcert/pdf/ssa-180704.pdf
- https://cert-portal.siemens.com/productcert/pdf/ssa-699386.pdf