CVE-2024-31485highCWE-77

CVE-2024-31485: high-severity vulnerability in Siemens CPCI85 Central Processing/Communication

Published · Updated

Follow this CVE+ Monitor CPCI85 Central Processing/Communication+ Monitor SICORE Base system

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.6epss 2.4%
A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V5.30), SICORE Base system (All versions < V1.3.0). The web interface of affected devices is vulnerable to command injection due to missing server side input sanitation. This could allow an authenticated privileged remote attacker to execute arbitrary code with root privileges.
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
Siemens · CPCI85 Central Processing/CommunicationSiemens · SICORE Base system
Related CVEs — Siemens CPCI85 Central Processing/Communication

In the same product, most dangerous first.

CVE-2026-54801HIGHCVE-2026-54801EPSS 0.6%CVE-2024-39601HIGHCVE-2024-39601EPSS 0.5%CVE-2024-31484HIGHCVE-2024-31484EPSS 0.5%CVE-2024-37998CRITICALCVE-2024-37998EPSS 0.5%CVE-2026-54798HIGHCVE-2026-54798EPSS 0.4%CVE-2026-27664HIGHCVE-2026-27664EPSS 0.4%