NetSight
IP …
critical9.1

CVE-2023-44373

Affected devices do not properly sanitize an input field.

Impact

Affected devices do not properly sanitize an input field. This could allow an authenticated remote attacker with administrative privileges to inject code or spawn a system root shell. Follow-up of CVE-2022-36323.

Affected products

VendorProductAffected versions
Siemens6gk5205-3bb00-2ab2 Firmware
before 4.5
Siemens6gk5205-3bb00-2tb2 Firmware
before 4.5
Siemens6gk5205-3bd00-2tb2 Firmware
before 4.5
Siemens6gk5205-3bd00-2ab2 Firmware
before 4.5
Siemens6gk5205-3bf00-2tb2 Firmware
through 4.5
Siemens6gk5205-3bf00-2ab2 Firmware
before 4.5
Siemens6gk5208-0ba00-2tb2 Firmware
before 4.5
Siemens6gk5208-0ba00-2ab2 Firmware
before 4.5
Siemens6gk5213-3bd00-2tb2 Firmware
before 4.5
Siemens6gk5213-3bd00-2ab2 Firmware
before 4.5
Siemens6gk5213-3bb00-2tb2 Firmware
before 4.5
Siemens6gk5213-3bb00-2ab2 Firmware
before 4.5

Weakness classification

CWE-74

References