Vulnerabilities

TI-2024-26531 CVE-2024-39601 · GHSA-6v56-9m73-2rm4

Missing authentication in Siemens CPCI85 Central Processing/Communication

LOW 32

A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V5.40), SICORE Base system (All versions < V1.4.0).

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00524 Published 2024-07-22 Fixed in V5.40, V1.4.0 CWE-306

TI-2024-25301 CVE-2024-37998 · GHSA-rp56-x26j-363p

MEDIUM 48

A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V5.40), SICORE Base system (All versions < V1.4.0).

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00454 Published 2024-07-22 Fixed in V5.40, V1.4.0 CWE-620