Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-6v56-9m73-2rm4

Опубликовано: 22 июл. 2024
Источник: github
Github: Не прошло ревью
CVSS4: 7.1
CVSS3: 6.5

Описание

A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V5.40), SICORE Base system (All versions < V1.4.0). Affected devices allow a remote authenticated user or an unauthenticated user with physical access to downgrade the firmware of the device. This could allow an attacker to downgrade the device to older versions with known vulnerabilities.

A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V5.40), SICORE Base system (All versions < V1.4.0). Affected devices allow a remote authenticated user or an unauthenticated user with physical access to downgrade the firmware of the device. This could allow an attacker to downgrade the device to older versions with known vulnerabilities.

EPSS

Процентиль: 54%
0.0031
Низкий

7.1 High

CVSS4

6.5 Medium

CVSS3

Дефекты

CWE-306

Связанные уязвимости

CVSS3: 6.5
nvd
больше 1 года назад

A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V5.40), SICORE Base system (All versions < V1.4.0). Affected devices allow a remote authenticated user or an unauthenticated user with physical access to downgrade the firmware of the device. This could allow an attacker to downgrade the device to older versions with known vulnerabilities.

CVSS3: 6.5
fstec
больше 1 года назад

Уязвимость микропрограммного обеспечения CPCI85 и SICORE процессорных модулей управления Siemens SICAM CP-8031, CP-8050, SICAM EGS, позволяющая нарушителю понизить версию прошивки устройства

EPSS

Процентиль: 54%
0.0031
Низкий

7.1 High

CVSS4

6.5 Medium

CVSS3

Дефекты

CWE-306