CVE-2024-37998criticalCWE-620

CVE-2024-37998: critical vulnerability in Siemens CPCI85 Central Processing/Communication

Published · Updated

Follow this CVE+ Monitor CPCI85 Central Processing/Communication+ Monitor SICORE Base system

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.3epss 0.5%
A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V5.40), SICORE Base system (All versions < V1.4.0). The password of administrative accounts of the affected applications can be reset without requiring the knowledge of the current password, given the auto login is enabled. This could allow an unauthorized attacker to obtain administrative access of the affected applications.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
Siemens · CPCI85 Central Processing/CommunicationSiemens · SICORE Base system
Related CVEs — Siemens CPCI85 Central Processing/Communication

In the same product, most dangerous first.

CVE-2024-31485HIGHCVE-2024-31485EPSS 2.4%CVE-2026-54801HIGHCVE-2026-54801EPSS 0.6%CVE-2024-39601HIGHCVE-2024-39601EPSS 0.5%CVE-2024-31484HIGHCVE-2024-31484EPSS 0.5%CVE-2026-54798HIGHCVE-2026-54798EPSS 0.4%CVE-2026-27664HIGHCVE-2026-27664EPSS 0.4%