Detections
Analytics
Siemens (CVE-2021-45034)
high Tenable OT Security Plugin ID 501067
Synopsis
The remote OT asset is affected by a vulnerability.Description
A vulnerability has been identified in CP-8000 MASTER MODULE WITH I/O-25/+70C (All versions < V16.20), CP-8000 MASTER MODULE WITH I/O
-40/+70C (All versions < V16.20), CP-8021 MASTER MODULE (All versions < V16.20), CP-8022 MASTER MODULE WITH GPRS (All versions < V16.20).
The web server of the affected system allows access to logfiles and diagnostic data generated by a privileged user. An unauthenticated attacker could access the files by knowing the corresponding download links.
This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.
Solution
Refer to the vendor advisory.See Also
https://cert-portal.siemens.com/productcert/pdf/ssa-324998.pdf
Plugin Details
Severity: High
ID: 501067
Version: 1.7
Type: remote
Family: Tenable.ot
Published: 4/20/2023
Updated: 11/25/2024
Supported Sensors: Tenable OT Security
Risk Information
VPR
Risk Factor: Medium
Score: 4.4
CVSS v2
Risk Factor: Medium
Base Score: 4.3
Temporal Score: 3.4
Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:N/A:N
CVSS Score Source: CVE-2021-45034
CVSS v3
Risk Factor: High
Base Score: 7.5
Temporal Score: 6.7
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C
Vulnerability Information
CPE: cpe:/o:siemens:cp-8022_master_module_with_gprs_firmware, cpe:/o:siemens:cp-8000_master_module_with_i%2fo_-40%2f%2b70_firmware, cpe:/o:siemens:cp-8021_master_module_firmware, cpe:/o:siemens:cp-8000_master_module_with_i%2fo_-25%2f%2b70_firmware
Required KB Items: Tenable.ot/Siemens
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 1/11/2022
Vulnerability Publication Date: 1/11/2022
Reference Information
CVE: CVE-2021-45034