CVE-2024-31485

A vulnerability has been identified in CPCI85 Central Processing/Communication All versions V5.30, SICORE Base system All versions V1.3.0. The web interface of affected devices is vulnerable to command injection due to missing server side input sanitation. This could allow an authenticated...

CVE-2024-53832

A vulnerability has been identified in CPCI85 Central Processing/Communication All versions V05.30. The affected devices contain a secure element which is connected via an unencrypted SPI bus. This could allow an attacker with physical access to the SPI bus to observe the password used for the...

CVE-2024-53832

A vulnerability has been identified in CPCI85 Central Processing/Communication All versions V05.30. The affected devices contain a secure element which is connected via an unencrypted SPI bus. This could allow an attacker with physical access to the SPI bus to observe the password used for the...

CVE-2024-53832

A vulnerability has been identified in CPCI85 Central Processing/Communication All versions V05.30. The affected devices contain a secure element which is connected via an unencrypted SPI bus. This could allow an attacker with physical access to the SPI bus to observe the password used for the...

CVE-2024-53832

CVE-2024-53832 affects Siemens SICAM A8000 devices (CP-8031/CP-8050) with CPCI85 Central Processing/Communication, all versions before V05.30. A secure element is connected via an unencrypted SPI bus, enabling a physically proximate attacker to observe the authentication password and use the secu...

CVE-2024-39601

A vulnerability has been identified in CPCI85 Central Processing/Communication All versions V5.40, SICORE Base system All versions V1.4.0. Affected devices allow a remote authenticated user or an unauthenticated user with physical access to downgrade the firmware of the device. This could allow a...

CVE-2024-39601

A vulnerability has been identified in CPCI85 Central Processing/Communication All versions V5.40, SICORE Base system All versions V1.4.0. Affected devices allow a remote authenticated user or an unauthenticated user with physical access to downgrade the firmware of the device. This could allow a...

CVE-2024-39601

A vulnerability has been identified in CPCI85 Central Processing/Communication All versions V5.40, SICORE Base system All versions V1.4.0. Affected devices allow a remote authenticated user or an unauthenticated user with physical access to downgrade the firmware of the device. This could allow a...

CVE-2024-39601

CVE-2024-39601 affects CPCI85 Central Processing/Communication (all versions before V5.40) and SICORE Base system (all versions before V1.4.0). The root cause is missing authentication for a critical function that allows firmware downgrades, enabling remote authenticated users or unauthenticated ...

CVE-2024-37998

A vulnerability has been identified in CPCI85 Central Processing/Communication All versions V5.40, SICORE Base system All versions V1.4.0. The password of administrative accounts of the affected applications can be reset without requiring the knowledge of the current password, given the auto logi...

CVE-2024-37998

A vulnerability has been identified in CPCI85 Central Processing/Communication All versions V5.40, SICORE Base system All versions V1.4.0. The password of administrative accounts of the affected applications can be reset without requiring the knowledge of the current password, given the auto logi...

CVE-2024-37998

CVE-2024-37998 affects Siemens CPCI85 Central Processing/Communication (all versions < V5.40) and SICORE Base system (all versions

PT-2024-5126 · Unknown · Cpci85 Central Processing/Communication +1

Name of the Vulnerable Software and Affected Versions: CPCI85 Central Processing/Communication versions prior to V5.40 SICORE Base system versions prior to V1.4.0 Description: A vulnerability has been identified that allows a remote authenticated user or an unauthenticated user with physical acce...

Siemens SICAM Products

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

CVE-2024-31484

A vulnerability has been identified in CPC80 Central Processing/Communication All versions V16.41, CPCI85 Central Processing/Communication All versions V5.30, CPCX26 Central Processing/Communication All versions V06.02, ETA4 Ethernet Interface IEC60870-5-104 All versions V10.46, ETA5 Ethernet Int...

CVE-2024-31485

CVE-2024-31485 affects CPCI85 Central Processing/Communication (all versions < V5.30) and SICORE Base system (all versions

CVE-2024-31485

A vulnerability has been identified in CPCI85 Central Processing/Communication All versions V5.30, SICORE Base system All versions V1.3.0. The web interface of affected devices is vulnerable to command injection due to missing server side input sanitation. This could allow an authenticated...

CVE-2024-31484

A vulnerability has been identified in CPC80 Central Processing/Communication All versions V16.41, CPCI85 Central Processing/Communication All versions V5.30, CPCX26 Central Processing/Communication All versions V06.02, ETA4 Ethernet Interface IEC60870-5-104 All versions V10.46, ETA5 Ethernet Int...

CVE-2024-31484

CVE-2024-31484 affects Siemens SICAM family: CPC80, CPCI85, CPCX26, ETA4, ETA5, PCCX26 (various versions prior to the listed fixed releases). Root cause is improper null termination when parsing a specific HTTP header, enabling code execution in the current process or a denial-of-service conditio...

Siemens SICAM Products

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...