VDB
GHSA-fmx3-5pvm-8275
GHSA-fmx3-5pvm-8275
PUBLISHED
CVSS 7.199999809265137 HIGH
Record from GitHub Advisory Database · Published June 13, 2023
A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05), CP-8050 MASTER MODULE (All versions < CPCI85 V05). The web interface of affected devices is vulnerable to command injection due to missing server side input sanitation. This could allow an authenticated privileged remote attacker to execute arbitrary code with root privileges.
Risk scores
CVSS 3.1
7.199999809265137
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Timeline
- Jun 13, 2023 CVE Published
- May 1, 2026 Security Advisory
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln GHSA-fmx3-5pvm-8275
vulnetix vdb fixes GHSA-fmx3-5pvm-8275
Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/GHSA-fmx3-5pvm-8275/fixes/registry"
The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://nvd.nist.gov/vuln/detail/CVE-2023-33919 advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-731916.pdf url
- http://seclists.org/fulldisclosure/2023/Jul/14 url
- http://packetstormsecurity.com/files/173370/Siemens-A8000-CP-8050-CP-8031-Code-Execution-Command-Injection.html url
- http://seclists.org/fulldisclosure/2024/Jul/4 url
- http://seclists.org/fulldisclosure/2025/Feb/19 url