{ "schema_version": "1.4.0", "id": "GHSA-q8fx-9mjf-3j27", "modified": "2022-01-20T00:02:43Z", "published": "2022-01-12T00:01:23Z", "aliases": [ "CVE-2021-45033" ], "details": "A vulnerability has been identified in CP-8000 MASTER MODULE WITH I/O -25/+70°C (All versions < V16.20), CP-8000 MASTER MODULE WITH I/O -40/+70°C (All versions < V16.20), CP-8021 MASTER MODULE (All versions < V16.20), CP-8022 MASTER MODULE WITH GPRS (All versions < V16.20). An undocumented debug port uses hard-coded default credentials. If this port is enabled by a privileged user, an attacker aware of the credentials could access an administrative debug shell on the affected device.", "severity": [], "affected": [], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-45033" }, { "type": "WEB", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-324998.pdf" } ], "database_specific": { "cwe_ids": [ "CWE-798" ], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2022-01-11T12:15:00Z" } }