CVE-2023-31238

CWE-732 — Incorrect Permission Assignment3 documents3 sources
Severity
4.8MEDIUM
EPSS
0.1%
top 70.15%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
Siemens Sicam P850Siemens Sicam P855Siemens Sicam T+1 more
Timeline
PublishedJun 13

Description

A vulnerability has been identified in SICAM P850 (7KG8500-0AA00-0AA0) (All versions < V3.11), SICAM P850 (7KG8500-0AA00-2AA0) (All versions < V3.11), SICAM P850 (7KG8500-0AA10-0AA0) (All versions < V3.11), SICAM P850 (7KG8500-0AA10-2AA0) (All versions < V3.11), SICAM P850 (7KG8500-0AA30-0AA0) (All versions < V3.11), SICAM P850 (7KG8500-0AA30-2AA0) (All versions < V3.11), SICAM P850 (7KG8501-0AA01-0AA0) (All versions < V3.11), SICAM P850 (7KG8501-0AA01-2AA0) (All versions < V3.11), SICAM P850 (7…

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:LExploitability: 1.3 | Impact: 3.7

Affected Packages4 packages

▶CVEListV5siemens/sicam_p850< V3.11
▶CVEListV5siemens/sicam_p855< V3.11
▶CVEListV5siemens/sicam_t< V3.0

Patches

Patch: cert-portal.siemens.com ↗Patch: cert-portal.siemens.com ↗

🔴Vulnerability Details

2
CVEList
CVE-2023-31238: A vulnerability has been identified in SICAM P850 (7KG8500-0AA00-0AA0) (All versions < V3↗2023-06-13
▶
GHSA
GHSA-3gq4-h9hg-9898: A vulnerability has been identified in POWER METER SICAM Q200 family (All versions < V2↗2023-06-13
▶
CVE-2023-31238 (MEDIUM CVSS 4.8) | A vulnerability has been identified | cvebase.io