CVE-2023-33919

HighCVSS 7.2

Published: 13/06/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

47.72%

99th percentile - higher than 99% of all known CVEs

Summary

A vulnerability has been identified in CP-8031 and CP-8050 modules that are versions earlier than CPCI85 V05. The web interface of affected devices is vulnerable to command injection due to missing server side input sanitation.

Risk Assessment

This vulnerability could allow an authenticated privileged remote attacker to execute arbitrary code with root privileges, posing a serious security risk to the system.

Recommendation

It is recommended to update CP-8031 and CP-8050 modules to version CPCI85 V05 or later to mitigate this vulnerability.

Original NVD description (English source)

A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05), CP-8050 MASTER MODULE (All versions < CPCI85 V05). The web interface of affected devices is vulnerable to command injection due to missing server side input sanitation. This could allow an authenticated privileged remote attacker to execute arbitrary code with root privileges.