CVE-2023-29128 : Security Advisory and Response

A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 and CC716, allowing a path traversal attack that could be exploited by a remote attacker.

Understanding CVE-2023-29128

This article delves into the details of a vulnerability present in SIMATIC Cloud Connect 7 CC712 and CC716.

What is CVE-2023-29128?

The vulnerability in SIMATIC Cloud Connect 7 CC712 and CC716 allows an authenticated privileged remote attacker to write any file with the extension

.db

due to a path traversal issue.

The Impact of CVE-2023-29128

The impact of this vulnerability is rated as low, with a CVSS base score of 3.8.

Technical Details of CVE-2023-29128

Let's explore the technical aspects of CVE-2023-29128.

Vulnerability Description

The vulnerability exists in the filename upload feature of the web-based management of the affected devices, making them susceptible to path traversal attacks.

Affected Systems and Versions

Vendor: Siemens
Affected Products:
SIMATIC Cloud Connect 7 CC712
Versions Affected: All versions >= V2.0 < V2.1
SIMATIC Cloud Connect 7 CC716
Versions Affected: All versions >= V2.0 < V2.1

Exploitation Mechanism

An authenticated privileged remote attacker can exploit this vulnerability to write arbitrary files with the

.db

extension.

Mitigation and Prevention

Understanding how to mitigate and prevent exploitation of CVE-2023-29128 is crucial.

Immediate Steps to Take

Ensure access controls are properly configured to limit privileged access.
Apply vendor-supplied patches or updates promptly.

Long-Term Security Practices

Regularly monitor and update security measures.
Conduct security assessments to identify and remediate vulnerabilities.

Patching and Updates

Keep the affected devices up to date with the latest security patches to prevent potential exploitation of the vulnerability.