CPCI85 Central Processing/Communication Vulnerability: Command Injection Risk

CVE-2024-31485

Summary

A significant command injection vulnerability has been found in both the CPCI85 Central Processing/Communication and SICORE Base Systems from Siemens. This flaw arises from a lack of adequate server-side input sanitization in the web interface of these products. An authenticated attacker with privileged access could exploit this vulnerability to execute arbitrary commands at the root privilege level, raising severe security concerns for users of affected versions.

References