Cpci85 Central Processing/Communication
Approved changes feed: RSS · Atom
cpe:2.3:a:siemens:cpci85_central_processing/communication:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Siemens (4bd2a91b-02ad-5c3d-b25f-70697e0c9d7f) |
|---|---|
| Product | Cpci85 Central Processing/Communication (b985da8a-80c8-5a45-9a9a-f819ce8f6117) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-54801 |
vulnerable | 2026-07-29 01:00:27.969816 |
Details available
HIGH (7.2)
A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V26.20), SICORE Base system (All versions < V26.20.0). The affected application contains insufficient validation of authentication credentials when processing administrative account modifications through the web API. This could allow an authenticated attacker to bypass security controls and gain unauthorized elevated privileges.
Published: 2026-07-09T14:15:54.353Z
Updated: 2026-07-09T17:37:43.135Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-54800 |
vulnerable | 2026-07-29 01:00:27.969556 |
Details available
MEDIUM (4.8)
A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V26.20), SICORE Base system (All versions < V26.20.0). The affected application ships with a default configuration that disables all OPC UA security mechanisms. This could allow an attacker to gain unauthorized access and control over critical system functions.
Published: 2026-07-09T14:15:53.306Z
Updated: 2026-07-09T14:45:11.451Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-54799 |
vulnerable | 2026-07-29 01:00:27.969391 |
Details available
MEDIUM (6.7)
A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V26.20), SICORE Base system (All versions < V26.20.0). The affected application contains a vulnerability in its firmware update mechanism's signature validation process. This could allow an attacker to install malicious firmware, leading to persistent code execution and system compromise.
Published: 2026-07-09T14:15:52.247Z
Updated: 2026-07-09T14:46:38.615Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-54798 |
vulnerable | 2026-07-29 01:00:27.968385 |
Details available
MEDIUM (6.5)
A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V26.20), SICORE Base system (All versions < V26.20.0). The affected application includes a debugging interface that is accessible through HTTP endpoints. This could allow an authenticated attacker to disrupt the system by crashing the web process causing denial of service conditions.
Published: 2026-07-09T14:15:51.173Z
Updated: 2026-07-09T14:54:39.999Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-27664 |
vulnerable | 2026-06-08 07:53:22.857360 |
Details available
HIGH (7.5)
A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V26.10), SICORE Base system (All versions < V26.10.0). The affected application contains an out-of-bounds write vulnerability while parsing specially crafted XML inputs. This could allow an unauthenticated attacker to exploit this issue by sending a malicious XML request, which may cause the service to crash, resulting in a denial-of-service condition.
Published: 2026-03-26T14:03:21.993Z
Updated: 2026-04-14T18:24:39.273Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-27663 |
vulnerable | 2026-06-08 07:53:22.856239 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-53832 |
vulnerable | 2026-06-08 06:54:15.606088 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-3596 |
vulnerable | 2026-06-08 06:43:50.433039 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-39601 |
vulnerable | 2026-06-08 06:41:51.202543 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-37998 |
vulnerable | 2026-06-08 06:39:48.741804 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-31485 |
vulnerable | 2026-06-08 06:35:31.698747 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-31484 |
vulnerable | 2026-06-08 06:35:31.689211 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.