Cpci85 Central Processing/Communication
Approved changes feed: RSS · Atom
cpe:2.3:a:siemens:cpci85_central_processing/communication:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Siemens (4bd2a91b-02ad-5c3d-b25f-70697e0c9d7f) |
|---|---|
| Product | Cpci85 Central Processing/Communication (b985da8a-80c8-5a45-9a9a-f819ce8f6117) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-27664 |
vulnerable | 2026-06-08 07:53:22.857360 |
Details available
HIGH (7.5)
A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V26.10), SICORE Base system (All versions < V26.10.0). The affected application contains an out-of-bounds write vulnerability while parsing specially crafted XML inputs. This could allow an unauthenticated attacker to exploit this issue by sending a malicious XML request, which may cause the service to crash, resulting in a denial-of-service condition.
Published: 2026-03-26T14:03:21.993Z
Updated: 2026-04-14T18:24:39.273Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-27663 |
vulnerable | 2026-06-08 07:53:22.856239 |
Details available
MEDIUM (6.5)
A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V26.10), RTUM85 RTU Base (All versions < V26.10). The affected application contains denial-of-service (DoS) vulnerability. The remote operation mode is susceptible to a resource exhaustion condition when subjected to a high volume of requests. Sending multiple requests can exhaust resources, preventing parameterization and requiring a reset or reboot to restore functionality.
Published: 2026-03-26T14:03:20.787Z
Updated: 2026-04-14T18:24:38.079Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-53832 |
vulnerable | 2026-06-08 06:54:15.606088 |
Details available
MEDIUM (4.6)
A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V05.30). The affected devices contain a secure element which is connected via an unencrypted SPI bus. This could allow an attacker with physical access to the SPI bus to observe the password used for the secure element authentication, and then use the secure element as an oracle to decrypt all encrypted update files.
Published: 2024-12-10T13:54:14.682Z
Updated: 2025-11-03T20:48:25.060Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-3596 |
vulnerable | 2026-06-08 06:43:50.433039 |
RADIUS Protocol under RFC2865 is vulnerable to forgery attacks.
RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response using a chosen-prefix collision attack against MD5 Response Authenticator signature.
Published: 2024-07-09T12:02:53.001Z
Updated: 2026-06-09T09:01:52.617Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-39601 |
vulnerable | 2026-06-08 06:41:51.202543 |
Details available
MEDIUM (6.5)
A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V5.40), SICORE Base system (All versions < V1.4.0). Affected devices allow a remote authenticated user or an unauthenticated user with physical access to downgrade the firmware of the device. This could allow an attacker to downgrade the device to older versions with known vulnerabilities.
Published: 2024-07-22T13:54:50.768Z
Updated: 2025-11-03T20:38:20.135Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-37998 |
vulnerable | 2026-06-08 06:39:48.741804 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-31485 |
vulnerable | 2026-06-08 06:35:31.698747 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-31484 |
vulnerable | 2026-06-08 06:35:31.689211 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.