Description
A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V26.20), SICORE Base system (All versions < V26.20.0). The affected application contains a vulnerability in its firmware update mechanism's signature validation process. This could allow an attacker to install malicious firmware, leading to persistent code execution and system compromise.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | CPCI85 Central Processing/Communication | < V26.20 | V26.20 |
| Siemens | SICORE Base system | < V26.20.0 | V26.20.0 |
Advisories 5
- ICSA-26-197-05 Siemens SICAM 8 CISA ICS & IT advisories · Sep 15, 2026
- NCSC-2026-0346 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Sep 8, 2026
- SSA-229470 SSA-229470: Multiple Vulnerabilities in SICAM 8 Products Before V26.20 Siemens ProductCERT · Sep 8, 2026
- WID-SEC-2026-3232 Siemens SICAM 8: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 7, 2026
- NCSC-2026-0225 Kwetsbaarheden verholpen in Siemens SICORE NCSC-NL (Netherlands) · Jul 13, 2026