CVE-2024-31484
🗓️ 14 May 2024 10:02:23Reported by siemensType 
cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 108 Views🌐 WEB
| Reporter | Title | Published | Views | Family All 17 |
|---|---|---|---|---|
 | Siemens SICAM CPCI85/CPC80 Code Execution | 24 May 202400:00 | – | bdu_fstec |
 | CVE-2024-31484 | 26 Jun 202418:00 | – | circl |
 | Siemens 多款产品安全漏洞 | 14 May 202400:00 | – | cnnvd |
 | Unspecified Vulnerability in Siemens SICAM Products | 16 May 202400:00 | – | cnvd |
 | CVE-2024-31484 | 14 May 202410:02 | – | cvelist |
 | EUVD-2024-29364 | 3 Oct 202520:07 | – | euvd |
 | Siemens SICAM Products | 14 May 202400:00 | – | ics |
| Siemens SICAM AK3/BC/TM | 11 Jun 202400:00 | – | ics |
 | Vulnerabilities fixed in Siemens products | 14 May 202400:00 | – | ncsc |
| Vulnerabilities fixed in Siemens products | 11 Jun 202413:29 | – | ncsc |
10
Node
OR
[
{
"vendor": "Siemens",
"product": "CPC80 Central Processing/Communication",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V16.41",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "CPCI85 Central Processing/Communication",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V5.30",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "CPCX26 Central Processing/Communication",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V06.02",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "ETA4 Ethernet Interface IEC60870-5-104",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V10.46",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "ETA5 Ethernet Int. 1x100TX IEC61850 Ed.2",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V03.27",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "PCCX26 Ax 1703 PE, Contr, Communication Element",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V06.05",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
}
]| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| Session-ID | header | SICAM_TOOLBOX_1703_remote_connection_00.htm | Buffer overread vulnerability in the webserver triggered by the HTTP Session-ID header not being properly terminated, leading to memory data leakage. | CWE-170 |
| Session-ID | header | SICAM_TOOLBOX_1703_remote_connection_01.htm | Buffer overread vulnerability (alternate PoC endpoint) with the same root cause and CVE-2024-31484. | CWE-170 |
| p0 | request body | sicweb-ajax/rtum85/cview | Privilege escalation via interception of unencrypted web interface traffic; crafted POST payload to start packet capture could reveal sensitive information. | CWE-170 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
17 Jun 2026 07:28Current
7.6High risk
Vulners AI Score7.6
CVSS 47.3
CVSS 3.17.8
EPSS0.00468
SSVC