High SSA-246443 2 CVEs

SSA-246443: Multiple Vulnerabilities in SICAM 8 Products

Published Mar 26, 2026 · Updated Mar 26, 2026

Vendor: Siemens Product: CPCI85 Central Processing/Communication Product: RTUM85 RTU Base Product: SICORE Base system

Summary

Multiple SICAM 8 products are affected by multiple vulnerabilities that could lead to denial of service, namely:

-
SICAM A8000 Device firmware

- CPCI85 for CP-8031/CP-8050
- SICORE for CP-8010/CP-8012
- RTUM85 for CP-8010/CP-8012

-
SICAM EGS Device firmware

- CPCI85

-
SICAM S8000

- SICORE
- RTUM85

Siemens has released new versions for the affected products and recommends to update to the latest versions.

Vulnerabilities 2

High 7.5

CVE-2026-27664

A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V26.10), SICORE Base sys…

Siemens CPCI85 Central Processing/Communication SICORE Base system ICS / OT

Mar 26, 2026
Medium 6.5

CVE-2026-27663

A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V26.10), RTUM85 RTU Base…

Siemens CPCI85 Central Processing/Communication RTUM85 RTU Base ICS / OT

Mar 26, 2026

Revision history

2026-03-26 #1
Publication Date

References

SSA-246443: Multiple Vulnerabilities in SICAM 8 Products - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-246443.html