CVE-2021-46304

A vulnerability has been identified in CP-8000 MASTER MODULE WITH I/O -25/+70°C (All versions), CP-8000 MASTER MODULE WITH I/O -40/+70°C (All versions), CP-8021 MASTER MODULE (All versions), CP-8022 MASTER MODULE WITH GPRS (All versions). The component allows to activate a web server module which provides unauthenticated access to its web pages. This could allow an attacker to retrieve debug-level information from the component such as internal network topology or connected systems.

• CWE-284

• https://cert-portal.siemens.com/productcert/pdf/ssa-185638.pdfVendor Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-185638.pdfVendor Advisory

Published

Aug 10, 2022

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-46263Tenda AC Series Router AC11_V02.03.01.104_CN was discovered …9.8
• CVE-2021-46264Tenda AC Series Router AC11_V02.03.01.104_CN was discovered …9.8
• CVE-2021-46265Tenda AC Series Router AC11_V02.03.01.104_CN was discovered …9.8
• CVE-2021-46270JFrog Artifactory before 7.31.10, is vulnerable to Broken Ac…2.7
• CVE-2021-46279Session fixation and insufficient session expiration vulnera…8.8
• CVE-2021-46283nf_tables_newset in net/netfilter/nf_tables_api.c in the Lin…5.5
• CVE-2021-46307An SQL Injection vulnerability exists in Projectworlds Onlin…9.8
• CVE-2021-46308An SQL Injection vulnerability exists in Sourcecodester Onli…9.8
• CVE-2021-46309An SQL Injection vulnerability exists in Sourcecodester Empl…9.8
• CVE-2021-46310An issue was discovered IW44Image.cpp in djvulibre 3.5.28 in…6.5
• CVE-2021-46311A NULL pointer dereference vulnerability exists in GPAC v1.1…5.5
• CVE-2021-46312An issue was discovered IW44EncodeCodec.cpp in djvulibre 3.5…6.5