Veille CVE

Recherche « Siemens SICORE Base system »

4 CVE

Critique 0 Élevée 1 Moyenne 3 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Siemens SICORE Base system » ✕
  1. CVE-2026-54801 7.2 Élevée

    Siemens CPCI85 Central Processing/Communication · Siemens SICORE Base system

    A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V26.20), SICORE Base system (All versions < V26.20.0). The affected application contains insufficient validation of authentication credentials when processing administrative account modifications through the web API. This could allow an authenticated attacker to bypass security controls and gain unauthorized elevated privileges.

  2. CVE-2026-54800 4.8 Moyenne

    Siemens CPCI85 Central Processing/Communication · Siemens SICORE Base system

    A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V26.20), SICORE Base system (All versions < V26.20.0). The affected application ships with a default configuration that disables all OPC UA security mechanisms. This could allow an attacker to gain unauthorized access and control over critical system functions.

  3. CVE-2026-54799 6.7 Moyenne

    Siemens CPCI85 Central Processing/Communication · Siemens SICORE Base system

    A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V26.20), SICORE Base system (All versions < V26.20.0). The affected application contains a vulnerability in its firmware update mechanism's signature validation process. This could allow an attacker to install malicious firmware, leading to persistent code execution and system compromise.

  4. CVE-2026-54798 6.5 Moyenne

    Siemens CPCI85 Central Processing/Communication · Siemens SICORE Base system

    A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V26.20), SICORE Base system (All versions < V26.20.0). The affected application includes a debugging interface that is accessible through HTTP endpoints. This could allow an authenticated attacker to disrupt the system by crashing the web process causing denial of service conditions.