CVE-2024-31485

🗓️ 14 May 2024 10:02:25Reported by siemensType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 87 Views🌐 WEB

A vulnerability in CPCI85 and SICORE Base system allows authenticated remote attackers to execute arbitrary cod

Reporter	Title	Published	Views	Family All 13
BDU FSTEC	The vulnerability of the CPCI85 and SICORE processor module control software from Siemens SICAM allows a hacker to execute arbitrary code.	24 May 202400:00	–	bdu_fstec
Circl	CVE-2024-31485	26 Jun 202418:00	–	circl
CNNVD	Siemens 多款产品命令注入漏洞	14 May 202400:00	–	cnnvd
CNVD	Siemens SICAM Product Command Injection Vulnerability	16 May 202400:00	–	cnvd
Cvelist	CVE-2024-31485	14 May 202410:02	–	cvelist
EUVD	EUVD-2024-29365	3 Oct 202520:07	–	euvd
ICS	Siemens SICAM Products	14 May 202400:00	–	ics
NCSC	Vulnerabilities fixed in Siemens products	14 May 202400:00	–	ncsc
NVD	CVE-2024-31485	14 May 202416:16	–	nvd
Packet Storm	Siemens CP-8000 / CP-8021 / CP8-022 / CP-8031 / CP-8050 / SICORE Buffer Overread / Escalation	4 Jul 202400:00	–	packetstorm

[
  {
    "vendor": "Siemens",
    "product": "CPCI85 Central Processing/Communication",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V5.30",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SICORE Base system",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V1.3.0",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  }
]

Source	Link
cert-portal	www.cert-portal.siemens.com/productcert/html/ssa-871704.html
seclists	www.seclists.org/fulldisclosure/2024/Jul/4

Parameter	Position	Path	Description	CWE
Session-ID	header	SICAM_TOOLBOX_1703_remote_connection_00.htm	Buffer overread via HTTP header Session-ID leading to memory leakage in response.	CWE-77
p0	request body	sicweb-ajax/rtum85/cview	Privilege escalation: attacker intercepts unencrypted traffic to dump credentials via modifying packet capture control.	CWE-77

17 Jun 2026 07:28Current

7.9High risk

Vulners AI Score7.9

CVSS 3.17.2

CVSS 48.6

EPSS0.02437

SSVC

CWE-77