CVE-2024-31485

🗓️ 14 May 2024 10:02:25Reported by siemensType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 74 Views🌐 WEB

A vulnerability in CPCI85 and SICORE Base system allows authenticated remote attackers to execute arbitrary cod

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2024-31485	26 Jun 202418:00	–	circl
CNNVD	Siemens 多款产品命令注入漏洞	14 May 202400:00	–	cnnvd
CNVD	Siemens SICAM Product Command Injection Vulnerability	16 May 202400:00	–	cnvd
Cvelist	CVE-2024-31485	14 May 202410:02	–	cvelist
EUVD	EUVD-2024-29365	3 Oct 202520:07	–	euvd
ICS	Siemens SICAM Products	14 May 202400:00	–	ics
NCSC	Vulnerabilities fixed in Siemens products	14 May 202400:00	–	ncsc
NVD	CVE-2024-31485	14 May 202416:16	–	nvd
Packet Storm	Siemens CP-8000 / CP-8021 / CP8-022 / CP-8031 / CP-8050 / SICORE Buffer Overread / Escalation	4 Jul 202400:00	–	packetstorm
Positive Technologies	PT-2024-3749 · Unknown · Cpci85 Central Processing/Communication +1	14 May 202400:00	–	ptsecurity

[
  {
    "vendor": "Siemens",
    "product": "CPCI85 Central Processing/Communication",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V5.30",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SICORE Base system",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V1.3.0",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  }
]

Source	Link
cert-portal	www.cert-portal.siemens.com/productcert/html/ssa-871704.html
seclists	www.seclists.org/fulldisclosure/2024/Jul/4

Parameter	Position	Path	Description	CWE
p0	request body	sicweb-ajax/rtum85/cview	Privilege escalation via web interface by manipulating the packet capture command through the cview endpoint.	CWE-77
Session-ID	header	SICAM_TOOLBOX_1703_remote_connection_00.htm	Buffer overread triggered by crafted Session-ID header in the SICAM Toolbox remote connection endpoint.	CWE-77
Sequence-ID	header	SICAM_TOOLBOX_1703_remote_connection_00.htm	Buffer overread triggered by crafted Session-ID header in the SICAM Toolbox remote connection endpoint.	CWE-77
Content-Length	header	SICAM_TOOLBOX_1703_remote_connection_00.htm	Buffer overread triggered by crafted Session-ID header in the SICAM Toolbox remote connection endpoint.	CWE-77
Content-Type	header	SICAM_TOOLBOX_1703_remote_connection_00.htm	Buffer overread triggered by crafted Session-ID header in the SICAM Toolbox remote connection endpoint.	CWE-77
type	header	SICAM_TOOLBOX_1703_remote_connection_00.htm	Buffer overread triggered by crafted Session-ID header in the SICAM Toolbox remote connection endpoint.	CWE-77

15 Apr 2026 00:35Current

7.9High risk

Vulners AI Score7.9

CVSS 3.17.2

CVSS 48.6

EPSS0.00633

SSVC

CWE-77