Vulnerabilidades do Siemens CPCI85 Central Processing/Communication
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Siemens CPCI85 Central Processing/Communication: 6 registro(s), com versões afetadas e correções.
CVE-2026-54801
Alta · 7.2
CWE-620 09/07/2026
A vulnerability has been identified in CPCI85 Central Processing/Communication (All…
A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V26.20), SICORE Base system (All versions < V26.20.0). The affected application contains insufficient validation of authentication credentials when processing administrative account modifications through the web API. This could allow an authenticated attacker to bypass security controls and gain unauthorized elevated privileges.
CVE-2026-54800
Média · 4.8
CWE-1188 09/07/2026
Insecure Default Initialization of Resource em Siemens CPCI85 Central Processing/Communication
A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V26.20), SICORE Base system (All versions < V26.20.0). The affected application ships with a default configuration that disables all OPC UA security mechanisms. This could allow an attacker to gain unauthorized access and control over critical system functions.
CVE-2026-54799
Média · 6.7
CWE-489 09/07/2026
A vulnerability has been identified in CPCI85 Central Processing/Communication (All…
A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V26.20), SICORE Base system (All versions < V26.20.0). The affected application contains a vulnerability in its firmware update mechanism's signature validation process. This could allow an attacker to install malicious firmware, leading to persistent code execution and system compromise.
CVE-2026-54798
Média · 6.5
CWE-489 09/07/2026
A vulnerability has been identified in CPCI85 Central Processing/Communication (All…
A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V26.20), SICORE Base system (All versions < V26.20.0). The affected application includes a debugging interface that is accessible through HTTP endpoints. This could allow an authenticated attacker to disrupt the system by crashing the web process causing denial of service conditions.
CVE-2026-27664
Alta · 7.5
CWE-787 26/03/2026
Out-of-bounds Write em Siemens CPCI85 Central Processing/Communication
A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V26.10), SICORE Base system (All versions < V26.10.0). The affected application contains an out-of-bounds write vulnerability while parsing specially crafted XML inputs. This could allow an unauthenticated attacker to exploit this issue by sending a malicious XML request, which may cause the service to crash, resulting in a denial-of-service condition.
CVE-2026-27663
Média · 6.5
CWE-770 26/03/2026
Allocation of Resources Without Limits or Throttling em Siemens CPCI85 Central Processing/Communication
A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V26.10), RTUM85 RTU Base (All versions < V26.10). The affected application contains denial-of-service (DoS) vulnerability. The remote operation mode is susceptible to a resource exhaustion condition when subjected to a high volume of requests. Sending multiple requests can exhaust resources, preventing parameterization and requiring a reset or reboot to restore functionality.