Siemens ProductCERT Patch Day — May 2024
Tuesday, 14 May 2024
Exploited 0
Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.
None of this release's vulnerabilities is known to be exploited so far.
Critical 6
- Critical 10.0
- Critical 10.0
- Critical 9.8
- Critical 9.8
- Critical 9.6
- Critical 9.1
All vulnerabilities 55
Critical6 ShowHide
- Critical 10.0
- Critical 10.0
- Critical 9.8
- Critical 9.8
- Critical 9.6
- Critical 9.1
High36 ShowHide
- High 8.8
- High 8.8
- High 8.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.6
- High 7.5
-
High 7.2
CVE-2024-27943 A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.5). The affected systems allow a privileged user to upload generic files to the ro…EPSS 1.3%
-
High 7.2
CVE-2024-27944 A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.5). The affected systems allow a privileged user to upload firmware files to the r…EPSS 1.4%
-
High 7.2
CVE-2024-27945 A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.5). The bulk import feature of the affected systems allow a privileged user to upl…EPSS 1.4%
-
High 7.2
CVE-2024-31485 A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V5.30), SICORE Base system (All versions < V1.3.0). The web inte…EPSS 2.4%
Medium11 ShowHide
- Medium 6.5
- Medium 6.5
- Medium 6.5
- Medium 6.5
- Medium 6.5
- Medium 6.3
- Medium 6.3
- Medium 6.3
- Medium 5.3
- Medium 5.3
- Medium 5.3
Low2 ShowHide
- Low 3.3
- Low 3.3