CPC80 Central Processing/Communication vulnerabilities

2 known vulnerabilities in CPC80 Central Processing/Communication from Siemens. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.0 Critical severity

  RFC: Improper Validation of Integrity Check Value

  CVE-2024-3596Jul 9, 2024IETFEPSS 14.9%

  RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response using a chosen-prefix collision attack against MD5 Response Authent

• 7.8 High severity

  CPC80 Central Processing/Communication: Improper Null Termination

  CVE-2024-31484May 14, 2024Siemens

  A vulnerability has been identified in CPC80 Central Processing/Communication (All versions < V16.41), CPCI85 Central Processing/Communication (All versions < V5.30), CPCX26 Central Processing/Communication (All versions < V06.02), ETA4 Ethernet Interface IEC6