CVE-2023-2827
CVSS Score of 10 (low)
Details
Summary
CVE-2023-2827 is a vulnerability affecting SAP Plant Connectivity version 15.5 (PCo) and the Production Connector for SAP Digital Manufacturing version 1.0. This vulnerability occurs because the software does not validate the signature of the JSON Web Token (JWT) in the HTTP request sent from SAP Digital Manufacturing. As a result, unauthorized callers from the internal network can send service requests to PCo or the Production Connector, potentially impacting the integrity of the integration with SAP Digital Manufacturing. The risk score for this vulnerability is 27, indicating a medium to high level of risk. It has been categorized as CWE-306 (MISSING AUTHENTICATION FOR A CRITICAL FUNCTION). Both NIST and SAP have provided severity ratings for this vulnerability, with NIST rating it as medium and SAP rating it as high. The potential impact includes integrity compromise and potential disruption of services.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions