Description
A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V5.40), SICORE Base system (All versions < V1.4.0). Affected devices allow a remote authenticated user or an unauthenticated user with physical access to downgrade the firmware of the device. This could allow an attacker to downgrade the device to older versions with known vulnerabilities.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | CPCI85 Central Processing/Communication | < V5.40 | V5.40 |
| Siemens | SICORE Base system | < V1.4.0 | V1.4.0 |
Advisories 3
- WID-SEC-2024-1686 Siemens SICAM: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 22, 2024
- ICSA-24-207-01 Siemens SICAM Products CISA ICS & IT advisories · Jul 22, 2024
- SSA-071402 SSA-071402: Multiple Vulnerabilities in SICAM Products Siemens ProductCERT · Jul 22, 2024