CVE-2023-33921
MediumCVSS 6.8Exploitation Probability (EPSS)
Low risk31th percentile - higher than 31% of all known CVEs
Summary
A vulnerability has been identified in CP-8031 MASTER MODULE and CP-8050 MASTER MODULE, which are versions earlier than CPCI85 V05. The affected devices contain an exposed UART console login interface.
Risk Assessment
An attacker with direct physical access could attempt to brute force or crack the root password, potentially leading to unauthorized access to the device.
Recommendation
It is recommended to update the modules to version CPCI85 V05 or later and to secure physical access to the devices.
Original NVD description (English source)
A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05), CP-8050 MASTER MODULE (All versions < CPCI85 V05). The affected devices contain an exposed UART console login interface. An attacker with direct physical access could try to bruteforce or crack the root password to login to the device.