Skip to content
fr Sign in
7.2 High

CVE-2024-31485 A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V5.30), SICORE Base…

Description

A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V5.30), SICORE Base system (All versions < V1.3.0). The web interface of affected devices is vulnerable to command injection due to missing server side input sanitation. This could allow an authenticated privileged remote attacker to execute arbitrary code with root privileges.

Affected products and versions

Product Affected versions Fixed in
CPCI85 Central Processing/Communication 5.30 earliest → < 5.30 5.30
SICORE Base system 1.3 earliest → < 1.3.0 1.3.0
sicore_base_system 1.3 earliest → < 1.3.0 1.3.0
cpci85_firmware 5.30 earliest → < 5.30 5.30

References

Timeline

  1. Published
  2. Last modified

Other CVEs of CPCI85 Central Processing/Communication

The 12 CVEs of CPCI85 Central Processing/Communication →
CVE-2026-54801 A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V26.20), SICORE Base… 7.2 High CVE-2026-54800 A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V26.20), SICORE Base… 4.8 Medium CVE-2026-54799 A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V26.20), SICORE Base… 6.7 Medium CVE-2026-54798 A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V26.20), SICORE Base… 6.5 Medium
Track this CVE