CVE-2023-36380 : What You Need to Know

A vulnerability has been identified in Siemens CP-8031 MASTER MODULE and CP-8050 MASTER MODULE devices. An attacker with knowledge of the corresponding private key could gain SSH access to affected devices.

Understanding CVE-2023-36380

This CVE affects Siemens CP-8031 MASTER MODULE and CP-8050 MASTER MODULE devices by allowing unauthorized SSH access to devices with activated debug support.

What is CVE-2023-36380?

The vulnerability in CP-8031 MASTER MODULE and CP-8050 MASTER MODULE devices allows attackers with the private key to gain SSH access to affected devices.

The Impact of CVE-2023-36380

The impact of this critical vulnerability is that unauthorized users can potentially access and compromise the affected devices, leading to potential data breaches and unauthorized system control.

Technical Details of CVE-2023-36380

This section provides more detailed technical information about the vulnerability.

Vulnerability Description

The affected devices contain a hard-coded ID in the SSH

authorized_keys

configuration file, enabling attackers with the private key to log in via SSH.

Affected Systems and Versions

Siemens CP-8031 MASTER MODULE and CP-8050 MASTER MODULE devices with all versions less than CPCI85 V05.11 (only with activated debug support) are impacted.

Exploitation Mechanism

Attackers exploit the hard-coded ID in the SSH

authorized_keys

configuration file to gain unauthorized SSH access to the affected devices.

Mitigation and Prevention

To protect against CVE-2023-36380, immediate action and long-term security practices are essential.

Immediate Steps to Take

Update the affected devices to version CPCI85 V05.11 or higher to mitigate the vulnerability.
Monitor SSH access logs for any suspicious activities.

Long-Term Security Practices

Regularly update and patch devices to the latest firmware version provided by Siemens.
Implement proper access controls and restrict SSH access to authorized personnel only.

Patching and Updates

Refer to the Siemens security advisory for detailed instructions on patching and securing the affected devices.