Path Traversal Flaw in SIMATIC Cloud Connect Products by Siemens

CVE-2023-29104

What is CVE-2023-29104?

A vulnerability has been detected in specific versions of Siemens SIMATIC Cloud Connect 7 CC712 and CC716. This path traversal vulnerability affects the upload feature in the web-based management interface, potentially granting an authenticated privileged remote attacker the ability to overwrite files accessible to the Linux user ccuser. Additionally, the flaw allows for the unauthorized download of any files that the ccuser can read. This security issue poses significant risks to data integrity and confidentiality.

References