CVE-2023-29128

CVE-2023-29128 is a path traversal vulnerability affecting Siemens SIMATIC Cloud Connect 7 CC712 and CC716 devices (versions >= V2.0 < V2.1). An authenticated, privileged remote attacker can exploit this flaw by manipulating the filename in the web-based management's upload feature to write arbitrary files with a ".db" extension. Rated with a CVSS score of 2.7 (LOW), the vulnerability has a low impact on integrity and requires high privileges for exploitation. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.