CVE-2024-39601highCWE-306

CVE-2024-39601: high-severity vulnerability in Siemens CPCI85 Central Processing/Communication

Published · Updated

Follow this CVE+ Monitor CPCI85 Central Processing/Communication+ Monitor SICORE Base system

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.1epss 0.5%
A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V5.40), SICORE Base system (All versions < V1.4.0). Affected devices allow a remote authenticated user or an unauthenticated user with physical access to downgrade the firmware of the device. This could allow an attacker to downgrade the device to older versions with known vulnerabilities.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
Affected products
Siemens · CPCI85 Central Processing/CommunicationSiemens · SICORE Base system
Related CVEs — Siemens CPCI85 Central Processing/Communication

In the same product, most dangerous first.

CVE-2024-31485HIGHCVE-2024-31485EPSS 2.4%CVE-2026-54801HIGHCVE-2026-54801EPSS 0.6%CVE-2024-31484HIGHCVE-2024-31484EPSS 0.5%CVE-2024-37998CRITICALCVE-2024-37998EPSS 0.5%CVE-2026-54798HIGHCVE-2026-54798EPSS 0.4%CVE-2026-27664HIGHCVE-2026-27664EPSS 0.4%