CVE-2024-37998criticalCWE-620

CVE-2024-37998: falha crítica em Siemens CPCI85 Central Processing/Communication

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar CPCI85 Central Processing/Communication+ Monitorar SICORE Base system

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.3epss 0.5%
A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V5.40), SICORE Base system (All versions < V1.4.0). The password of administrative accounts of the affected applications can be reset without requiring the knowledge of the current password, given the auto login is enabled. This could allow an unauthorized attacker to obtain administrative access of the affected applications.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Produtos afetados
Siemens · CPCI85 Central Processing/CommunicationSiemens · SICORE Base system
CVEs relacionadas — Siemens CPCI85 Central Processing/Communication

No mesmo produto, das mais perigosas para as menos.

CVE-2024-31485HIGHCVE-2024-31485EPSS 2.4%CVE-2026-54801HIGHCVE-2026-54801EPSS 0.6%CVE-2024-39601HIGHCVE-2024-39601EPSS 0.5%CVE-2024-31484HIGHCVE-2024-31484EPSS 0.5%CVE-2026-54798HIGHCVE-2026-54798EPSS 0.4%CVE-2026-27664HIGHCVE-2026-27664EPSS 0.4%