PT-2026-56805 · Siemens · Cpci85 Central Processing/Communication+1

Publicado 2026-07-09 · Atualizado 2026-07-09 · CVE-2026-54799

NVD

CVSS v3.1

6.7

Média

Vetor base

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V26.20), SICORE Base system (All versions < V26.20.0). The affected application contains a vulnerability in its firmware update mechanism's signature validation process. This could allow an attacker to install malicious firmware, leading to persistent code execution and system compromise.

Correção

Enumeração de Fraquezas

CWE-489

Identificadores relacionados

CVE-2026-54799

Produtos afetados

Cpci85 Central Processing/Communication

Sicore Base System

Referências · 2

• https://cert-portal.siemens.com/productcert/html/ssa-229470.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-54799 · Nota de Segurança