High SSA-229470 4 CVEs

SSA-229470: Multiple Vulnerabilities in SICAM 8 Products Before V26.20

Published Jul 9, 2026 · Updated Sep 8, 2026 · Revision 2

Vendor: Siemens Product: CPCI85 Central Processing/Communication Product: SICORE Base system

Summary

Multiple SICAM 8 products are affected by multiple vulnerabilities that could lead to denial of service, namely:

-
SICAM A8000 Device firmware

- CPCI85 for CP-8031/CP-8050
- SICORE for CP-8010/CP-8012

-
SICAM EGS Device firmware

- CPCI85

-
SICAM S8000

- SICORE

Siemens has released new versions for the affected products and recommends to update to the latest versions.

Vulnerabilities 4

High 7.2

CVE-2026-54801

A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V26.20), SICORE Base sys…

Siemens CPCI85 Central Processing/Communication SICORE Base system ICS / OT

Jul 9, 2026
Medium 6.7

CVE-2026-54799

A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V26.20), SICORE Base sys…

Siemens CPCI85 Central Processing/Communication SICORE Base system ICS / OT

Jul 9, 2026
Medium 6.5

CVE-2026-54798

A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V26.20), SICORE Base sys…

Siemens CPCI85 Central Processing/Communication SICORE Base system ICS / OT

Jul 9, 2026
Medium 4.8

CVE-2026-54800

A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V26.20), SICORE Base sys…

Siemens CPCI85 Central Processing/Communication SICORE Base system ICS / OT

Jul 9, 2026

Revision history

2026-09-08 #2
Added Acknowledgement
2026-07-09 #1
Publication Date

References

SSA-229470: Multiple Vulnerabilities in SICAM 8 Products Before V26.20 - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-229470.html