7.2
Élevée
CVE-2024-31485 A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V5.30), SICORE Base…
Description
A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V5.30), SICORE Base system (All versions < V1.3.0). The web interface of affected devices is vulnerable to command injection due to missing server side input sanitation. This could allow an authenticated privileged remote attacker to execute arbitrary code with root privileges.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| CPCI85 Central Processing/Communication 5.30 | premières → < 5.30 | 5.30 |
| SICORE Base system 1.3 | premières → < 1.3.0 | 1.3.0 |
| sicore_base_system 1.3 | premières → < 1.3.0 | 1.3.0 |
| cpci85_firmware 5.30 | premières → < 5.30 | 5.30 |
Références
- cert-portal.siemens.com cert-portal.siemens.com
- seclists.org seclists.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de CPCI85 Central Processing/Communication
Les 12 CVE de CPCI85 Central Processing/Communication →
CVE-2026-54801
A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V26.20), SICORE Base…
7.2
Élevée
CVE-2026-54800
A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V26.20), SICORE Base…
4.8
Moyenne
CVE-2026-54799
A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V26.20), SICORE Base…
6.7
Moyenne
CVE-2026-54798
A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V26.20), SICORE Base…
6.5
Moyenne