Affected devices use a hardcoded key to obfuscate the configuration backup that an administrator can export from the device. This could allow an authenticated attacker with administrative privileges or an attacker that obtains a configuration backup to extract configuration information from the exported file.

Project Subscriptions

Vendors Products
Siemens Subscribe
6ag1206-2bb00-7ac2 Subscribe
6ag1206-2bb00-7ac2 Firmware Subscribe
6ag1206-2bs00-7ac2 Subscribe
6ag1206-2bs00-7ac2 Firmware Subscribe
6ag1208-0ba00-7ac2 Subscribe
6ag1208-0ba00-7ac2 Firmware Subscribe
6ag1216-4bs00-7ac2 Subscribe
6ag1216-4bs00-7ac2 Firmware Subscribe
6gk5204-0ba00-2gf2 Subscribe
6gk5204-0ba00-2gf2 Firmware Subscribe
6gk5204-0ba00-2yf2 Subscribe
6gk5204-0ba00-2yf2 Firmware Subscribe
6gk5204-2aa00-2gf2 Subscribe
6gk5204-2aa00-2gf2 Firmware Subscribe
6gk5204-2aa00-2yf2 Subscribe
6gk5204-2aa00-2yf2 Firmware Subscribe
6gk5205-3bb00-2ab2 Subscribe
6gk5205-3bb00-2ab2 Firmware Subscribe
6gk5205-3bb00-2tb2 Subscribe
6gk5205-3bb00-2tb2 Firmware Subscribe
6gk5205-3bd00-2ab2 Subscribe
6gk5205-3bd00-2ab2 Firmware Subscribe
6gk5205-3bd00-2tb2 Subscribe
6gk5205-3bd00-2tb2 Firmware Subscribe
6gk5205-3bf00-2ab2 Subscribe
6gk5205-3bf00-2ab2 Firmware Subscribe
6gk5205-3bf00-2tb2 Subscribe
6gk5205-3bf00-2tb2 Firmware Subscribe
6gk5206-2bb00-2ac2 Subscribe
6gk5206-2bb00-2ac2 Firmware Subscribe
6gk5206-2bd00-2ac2 Subscribe
6gk5206-2bd00-2ac2 Firmware Subscribe
6gk5206-2bs00-2ac2 Subscribe
6gk5206-2bs00-2ac2 Firmware Subscribe
6gk5206-2bs00-2fc2 Subscribe
6gk5206-2bs00-2fc2 Firmware Subscribe
6gk5206-2gs00-2ac2 Subscribe
6gk5206-2gs00-2ac2 Firmware Subscribe
6gk5206-2gs00-2fc2 Subscribe
6gk5206-2gs00-2fc2 Firmware Subscribe
6gk5206-2gs00-2tc2 Subscribe
6gk5206-2gs00-2tc2 Firmware Subscribe
6gk5206-2rs00-2ac2 Subscribe
6gk5206-2rs00-2ac2 Firmware Subscribe
6gk5206-2rs00-5ac2 Subscribe
6gk5206-2rs00-5ac2 Firmware Subscribe
6gk5206-2rs00-5fc2 Subscribe
6gk5206-2rs00-5fc2 Firmware Subscribe
6gk5208-0ba00-2ab2 Subscribe
6gk5208-0ba00-2ab2 Firmware Subscribe
6gk5208-0ba00-2ac2 Subscribe
6gk5208-0ba00-2ac2 Firmware Subscribe
6gk5208-0ba00-2fc2 Subscribe
6gk5208-0ba00-2fc2 Firmware Subscribe
6gk5208-0ba00-2tb2 Subscribe
6gk5208-0ba00-2tb2 Firmware Subscribe
6gk5208-0ga00-2ac2 Subscribe
6gk5208-0ga00-2ac2 Firmware Subscribe
6gk5208-0ga00-2fc2 Subscribe
6gk5208-0ga00-2fc2 Firmware Subscribe
6gk5208-0ga00-2tc2 Subscribe
6gk5208-0ga00-2tc2 Firmware Subscribe
6gk5208-0ha00-2as6 Subscribe
6gk5208-0ha00-2as6 Firmware Subscribe
6gk5208-0ha00-2es6 Subscribe
6gk5208-0ha00-2es6 Firmware Subscribe
6gk5208-0ha00-2ts6 Subscribe
6gk5208-0ha00-2ts6 Firmware Subscribe
6gk5208-0ra00-2ac2 Subscribe
6gk5208-0ra00-2ac2 Firmware Subscribe
6gk5208-0ra00-5ac2 Subscribe
6gk5208-0ra00-5ac2 Firmware Subscribe
6gk5208-0ua00-5es6 Subscribe
6gk5208-0ua00-5es6 Firmware Subscribe
6gk5213-3bb00-2ab2 Subscribe
6gk5213-3bb00-2ab2 Firmware Subscribe
6gk5213-3bb00-2tb2 Subscribe
6gk5213-3bb00-2tb2 Firmware Subscribe
6gk5213-3bd00-2ab2 Subscribe
6gk5213-3bd00-2ab2 Firmware Subscribe
6gk5213-3bd00-2tb2 Subscribe
6gk5213-3bd00-2tb2 Firmware Subscribe
6gk5213-3bf00-2ab2 Subscribe
6gk5213-3bf00-2ab2 Firmware Subscribe
6gk5213-3bf00-2tb2 Subscribe
6gk5213-3bf00-2tb2 Firmware Subscribe
6gk5216-0ba00-2ab2 Subscribe
6gk5216-0ba00-2ab2 Firmware Subscribe
6gk5216-0ba00-2ac2 Subscribe
6gk5216-0ba00-2ac2 Firmware Subscribe
6gk5216-0ba00-2fc2 Subscribe
6gk5216-0ba00-2fc2 Firmware Subscribe
6gk5216-0ba00-2tb2 Subscribe
6gk5216-0ba00-2tb2 Firmware Subscribe
6gk5216-0ha00-2as6 Subscribe
6gk5216-0ha00-2as6 Firmware Subscribe
6gk5216-0ha00-2es6 Subscribe
6gk5216-0ha00-2es6 Firmware Subscribe
6gk5216-0ha00-2ts6 Subscribe
6gk5216-0ha00-2ts6 Firmware Subscribe
6gk5216-0ua00-5es6 Subscribe
6gk5216-0ua00-5es6 Firmware Subscribe
6gk5216-3rs00-2ac2 Subscribe
6gk5216-3rs00-2ac2 Firmware Subscribe
6gk5216-3rs00-5ac2 Subscribe
6gk5216-3rs00-5ac2 Firmware Subscribe
6gk5216-4bs00-2ac2 Subscribe
6gk5216-4bs00-2ac2 Firmware Subscribe
6gk5216-4gs00-2ac2 Subscribe
6gk5216-4gs00-2ac2 Firmware Subscribe
6gk5216-4gs00-2fc2 Subscribe
6gk5216-4gs00-2fc2 Firmware Subscribe
6gk5216-4gs00-2tc2 Subscribe
6gk5216-4gs00-2tc2 Firmware Subscribe
6gk5224-0ba00-2ac2 Subscribe
6gk5224-0ba00-2ac2 Firmware Subscribe
6gk5224-4gs00-2ac2 Subscribe
6gk5224-4gs00-2ac2 Firmware Subscribe
6gk5224-4gs00-2fc2 Subscribe
6gk5224-4gs00-2fc2 Firmware Subscribe
6gk5224-4gs00-2tc2 Subscribe
6gk5224-4gs00-2tc2 Firmware Subscribe
6gk5324-0ba00-2ar3 Subscribe
6gk5324-0ba00-2ar3 Firmware Subscribe
6gk5324-0ba00-3ar3 Subscribe
6gk5324-0ba00-3ar3 Firmware Subscribe
6gk5326-2qs00-3ar3 Subscribe
6gk5326-2qs00-3ar3 Firmware Subscribe
6gk5326-2qs00-3rr3 Subscribe
6gk5326-2qs00-3rr3 Firmware Subscribe
6gk5328-4fs00-2ar3 Subscribe
6gk5328-4fs00-2ar3 Firmware Subscribe
6gk5328-4fs00-2rr3 Subscribe
6gk5328-4fs00-2rr3 Firmware Subscribe
6gk5328-4fs00-3ar3 Subscribe
6gk5328-4fs00-3ar3 Firmware Subscribe
6gk5328-4fs00-3rr3 Subscribe
6gk5328-4fs00-3rr3 Firmware Subscribe
6gk5328-4ss00-2ar3 Subscribe
6gk5328-4ss00-2ar3 Firmware Subscribe
6gk5328-4ss00-3ar3 Subscribe
6gk5328-4ss00-3ar3 Firmware Subscribe
Advisories
Source ID Title
EUVD EUVD EUVD-2023-48672 Affected devices use a hardcoded key to obfuscate the configuration backup that an administrator can export from the device. This could allow an authenticated attacker with administrative privileges or an attacker that obtains a configuration backup to extract configuration information from the exported file.
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

Tue, 14 Jan 2025 10:45:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 4.9, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:P/RL:U/RC:C'}

cvssV4_0

{'score': 6.9, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N'}

cvssV3_1

{'score': 4.9, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N'}


Tue, 13 Aug 2024 08:00:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 4.9, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C'}

cvssV3_1

{'score': 4.9, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:P/RL:U/RC:C'}


Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: siemens

Published:

Updated: 2025-08-12T11:16:21.681Z

Reserved: 2023-09-28T16:18:45.648Z

Link: CVE-2023-44318

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2023-11-14T11:15:12.287

Modified: 2025-01-14T11:15:13.360

Link: CVE-2023-44318

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses