A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V26.20), SICORE Base system (All versions < V26.20.0). The affected application contains a vulnerability in its firmware update mechanism's signature validation process. This could allow an attacker to install malicious firmware, leading to persistent code execution and system compromise.
| Vendor | Product | Versions |
|---|---|---|
| siemens | cpci85 central processing/communication | 0, 0 |
Downstream vendors/products affected by this vulnerability
| Vendor | Product | Source | Confidence |
|---|---|---|---|
| siemens | sicore base system | mitre_affected | 90% |
Updated severity to HIGH, added affected version 26.19, and changed exploit availability status.
Initial creation
