Cpci85 Firmware vulnerabilities

3 known vulnerabilities in Cpci85 Firmware from Siemens. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  CPCI85 Central Processing/Communication: Unverified Password Change

  CVE-2024-37998Jul 22, 2024Siemens

  A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V5.40), SICORE Base system (All versions < V1.4.0). The password of administrative accounts of the affected applications can be reset without requiring the knowledge

• 7.2 High severity

  CPCI85 Central Processing/Communication: Improper Neutralization of Special Elements used in a Command

  CVE-2024-31485May 14, 2024SiemensEPSS 2.44%

  A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V5.30), SICORE Base system (All versions < V1.3.0). The web interface of affected devices is vulnerable to command injection due to missing server side input sanitat

• 7.2 High severity

  CP-8031 MASTER MODULE: Improper Neutralization of Special Elements used in a Command

  CVE-2023-33919Jun 13, 2023SiemensEPSS 47.7%

  A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05), CP-8050 MASTER MODULE (All versions < CPCI85 V05). The web interface of affected devices is vulnerable to command injection due to missing server side input sanitation. T