SICORE Base system vulnerabilities
5 known vulnerabilities in SICORE Base system from Siemens. 5 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.2 High severity
CPCI85 Central Processing/Communication: Unverified Password Change
A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V26.20), SICORE Base system (All versions < V26.20.0). The affected application contains insufficient validation of authentication credentials when processing admini
- 7.5 High severity
CPCI85 Central Processing/Communication: Out-of-bounds Write
A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V26.10), SICORE Base system (All versions < V26.10.0). The affected application contains an out-of-bounds write vulnerability while parsing specially crafted XML inp
- 9.8 Critical severity
CPCI85 Central Processing/Communication: Unverified Password Change
A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V5.40), SICORE Base system (All versions < V1.4.0). The password of administrative accounts of the affected applications can be reset without requiring the knowledge
- 9.0 Critical severity
RFC: Improper Validation of Integrity Check Value
RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response using a chosen-prefix collision attack against MD5 Response Authent
- 7.2 High severity
CPCI85 Central Processing/Communication: Improper Neutralization of Special Elements used in a Command
A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V5.30), SICORE Base system (All versions < V1.3.0). The web interface of affected devices is vulnerable to command injection due to missing server side input sanitat