CVE-2023-33920

Summary

CVE-2023-33920 is a newly identified vulnerability affecting the CP-8031 MASTER MODULE and CP-8050 MASTER MODULE, with all versions prior to CPCI85 V05 being vulnerable. The issue lies in the hard-coded hash of the root password, which is stored in these devices. An attacker with physical access to the device can exploit this vulnerability to gain UART console login access, potentially leading to unauthorized device control. This weakness could pose a significant risk to organizations that rely on these devices for critical infrastructure or data security. It is recommended that users of these devices upgrade to the latest CPCI85 V05 version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.