vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2023-33920

MEDIUM
6.8
CVSS Score
Published: June 13, 2023 at 08:17 AM UTC
Updated: June 17, 2026 at 06:02 AM UTC
4 products affected across 1 vendorCPCI85 FirmwareCPCI85CP-8031 MASTER MODULE

Using CP-8031 MASTER MODULE by Siemens?

Get instant alerts when new vulnerabilities affect CP-8031 MASTER MODULE - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
MEDIUM6.8
Exploit prediction
EPSS 0.4%
SSVC
No known exploit

Description

A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05), CP-8050 MASTER MODULE (All versions < CPCI85 V05). The affected devices contain the hash of the root password in a hard-coded form, which could be exploited for UART console login to the device. An attacker with direct physical access could exploit this vulnerability.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

CPCI85 Firmware· Siemens
95%
v < v05
Affected range stops below v05, so it looks safe — our inference, not a vendor statement
CPCI85· Siemens
90%
v < v05
Affected range stops below v05, so it looks safe — our inference, not a vendor statement
siemens-sicam-a8000-cp-8031 (environment) · siemens-sicam-a8000-cp-8050 (environment)
CP-8031 MASTER MODULE· Siemens
60%
All versions < CPCI85 V05
CP-8050 MASTER MODULE· Siemens
60%
All versions < CPCI85 V05

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (3)

Source: [email protected]
http://packetstormsecurity.com/files/173370/Siemens-A8000-CP-8050-CP-8031-Code-Execution-Command-Injection.html
Source: [email protected]
http://seclists.org/fulldisclosure/2023/Jul/14
PatchVendor Advisory
Source: [email protected]
https://cert-portal.siemens.com/productcert/pdf/ssa-731916.pdf

SSVC — Action Prioritization

SSVCNo known exploitNot automatableTotal impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

6.8MEDIUMsiemens
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-798

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card