PT-2026-56807 · Siemens · Cpci85 Central Processing/Communication+1

Publicado 2026-07-09 · Atualizado 2026-07-09 · CVE-2026-54801

Mitre

CVSS v3.1

7.2

Alta

Vetor base

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V26.20), SICORE Base system (All versions < V26.20.0). The affected application contains insufficient validation of authentication credentials when processing administrative account modifications through the web API. This could allow an authenticated attacker to bypass security controls and gain unauthorized elevated privileges.

Correção

Enumeração de Fraquezas

CWE-620

Identificadores relacionados

CVE-2026-54801

Produtos afetados

Cpci85 Central Processing/Communication

Sicore Base System

Referências · 2

• https://cert-portal.siemens.com/productcert/html/ssa-229470.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-54801 · Nota de Segurança