Sicore Base System
Approved changes feed: RSS · Atom
cpe:2.3:a:siemens:sicore_base_system:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Siemens (4bd2a91b-02ad-5c3d-b25f-70697e0c9d7f) |
|---|---|
| Product | Sicore Base System (c29ecff8-e04f-5cb5-ade0-94c1c8cf3a18) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-27664 |
vulnerable | 2026-06-08 07:53:22.858550 |
Details available
HIGH (7.5)
A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V26.10), SICORE Base system (All versions < V26.10.0). The affected application contains an out-of-bounds write vulnerability while parsing specially crafted XML inputs. This could allow an unauthenticated attacker to exploit this issue by sending a malicious XML request, which may cause the service to crash, resulting in a denial-of-service condition.
Published: 2026-03-26T14:03:21.993Z
Updated: 2026-04-14T18:24:39.273Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-3596 |
vulnerable | 2026-06-08 06:43:50.880476 |
RADIUS Protocol under RFC2865 is vulnerable to forgery attacks.
RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response using a chosen-prefix collision attack against MD5 Response Authenticator signature.
Published: 2024-07-09T12:02:53.001Z
Updated: 2026-06-09T09:01:52.617Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-39601 |
vulnerable | 2026-06-08 06:41:51.203250 |
Details available
MEDIUM (6.5)
A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V5.40), SICORE Base system (All versions < V1.4.0). Affected devices allow a remote authenticated user or an unauthenticated user with physical access to downgrade the firmware of the device. This could allow an attacker to downgrade the device to older versions with known vulnerabilities.
Published: 2024-07-22T13:54:50.768Z
Updated: 2025-11-03T20:38:20.135Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-37998 |
vulnerable | 2026-06-08 06:39:48.742429 |
Details available
CRITICAL (9.8)
A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V5.40), SICORE Base system (All versions < V1.4.0). The password of administrative accounts of the affected applications can be reset without requiring the knowledge of the current password, given the auto login is enabled. This could allow an unauthorized attacker to obtain administrative access of the affected applications.
Published: 2024-07-22T13:54:49.501Z
Updated: 2024-08-02T04:04:24.632Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-31485 |
vulnerable | 2026-06-08 06:35:31.700157 |
Details available
HIGH (7.2)
A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V5.30), SICORE Base system (All versions < V1.3.0). The web interface of affected devices is vulnerable to command injection due to missing server side input sanitation. This could allow an authenticated privileged remote attacker to execute arbitrary code with root privileges.
Published: 2024-05-14T10:02:25.052Z
Updated: 2025-02-13T17:47:58.693Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.