CVE-2023-29105
A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 < V2.1), SIMATIC Cloud Connect 7 CC712 (All versions < V2.1), SIMATIC Cloud Connect 7 CC716 (All versions >= V2.0 < V2.1), SIMATIC Cloud Connect 7 CC716 (All versions < V2.1). The affected device is vulnerable to a denial of service while parsing a random (non-JSON) MQTT payload. This could allow an attacker who can manipulate the communication between the MQTT broker and the affected device to cause a denial of service (DoS).
Scoring
- Severity
- MEDIUM
- CVSS base score
- 5.9
- CVSS vector
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
- EPSS probability
- 0.30%
- CWE
- CWE-544
- Published
- 2023-05-09
- Last modified
- 2026-03-13
Affected products
- Siemens SIMATIC Cloud Connect 7 CC712
- Siemens SIMATIC Cloud Connect 7 CC712
- Siemens SIMATIC Cloud Connect 7 CC716
- Siemens SIMATIC Cloud Connect 7 CC716
Weakness type
Related vulnerabilities
- CVE-2025-11750 — User Enumeration via Distinct Error Messages in langgenius/dify-web
- CVE-2024-41768 — IBM Engineering Lifecycle Optimization - Publishing unhandled SLL exception
- CVE-2023-6599 — Missing Standardized Error Handling Mechanism in microweber/microweber
- CVE-2020-5359 — Dell BSAFE Micro Edition Suite, versions prior to 4.5, are vulnerable to an Unchecked Return Value...