CVE-2023-2827

MediumCVSS 5.7/10Last modified Jun 17, 2026

Description

SAP Plant Connectivity - version 15.5 (PCo) or the Production Connector for SAP Digital Manufacturing - version 1.0, do not validate the signature of the JSON Web Token (JWT) in the HTTP request sent from SAP Digital Manufacturing. Therefore, unauthorized callers from the internal network could send service requests to PCo or the Production Connector, which could have an impact on the integrity of the integration with SAP Digital Manufacturing.

Metrics

CVSS 3.1 5.7/10CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-306

Affected software

VendorProductVersions
SAP_SESAP Plant Connectivity1.0

References

Timeline

Published
Jun 13, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-282706.8Windows Lock Screen Security Feature Bypass VulnerabilityCVE-2023-282715.5Windows Kernel Memory Information Disclosure VulnerabilityCVE-2023-282727.8Windows Kernel Elevation of Privilege VulnerabilityCVE-2023-282737.0Windows Clip Service Elevation of Privilege VulnerabilityCVE-2023-282747.8Windows Win32k Elevation of Privilege VulnerabilityCVE-2023-282758.8Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityCVE-2023-282764.4Windows Group Policy Security Feature Bypass VulnerabilityCVE-2023-282774.9Windows DNS Server Information Disclosure VulnerabilityCVE-2023-282786.6Windows DNS Server Remote Code Execution VulnerabilityCVE-2023-28287.5Every `named` instance configured to run as a recursive resolver maintains a cache database holding the responses to the queries it has receCVE-2023-282838.1Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution VulnerabilityCVE-2023-282844.3Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
CVE-2023-2827: Medium severity, CVSS 5.7 | Vulnix