CVE-2023-33920
MediumCVSS 6.8Exploitation Probability (EPSS)
Low risk28th percentile - higher than 28% of all known CVEs
Summary
A vulnerability has been identified in CP-8031 MASTER MODULE and CP-8050 MASTER MODULE, which contain the hash of the root password in a hard-coded form. Versions below CPCI85 V05 are vulnerable to an attack that could allow UART console login to the device.
Risk Assessment
An attacker with direct physical access to the device could exploit this vulnerability, posing a serious security risk to the system.
Recommendation
It is recommended to update the modules to version CPCI85 V05 or newer to mitigate this vulnerability.
Original NVD description (English source)
A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05), CP-8050 MASTER MODULE (All versions < CPCI85 V05). The affected devices contain the hash of the root password in a hard-coded form, which could be exploited for UART console login to the device. An attacker with direct physical access could exploit this vulnerability.