Medium severity6.5NVD Advisory· Published Jul 22, 2024· Updated Apr 15, 2026

CVE-2024-39601

Description

A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V5.40), SICORE Base system (All versions < V1.4.0). Affected devices allow a remote authenticated user or an unauthenticated user with physical access to downgrade the firmware of the device. This could allow an attacker to downgrade the device to older versions with known vulnerabilities.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Siemens Foundation/CPCI85 Central Processing/Communicationllm-fuzzy
Range: <V5.40
Siemens Foundation/Sicore Basellm-fuzzy
Range: <V1.4.0

Patches

Vulnerability mechanics

References

seclists.org/fulldisclosure/2025/Feb/19nvd
cert-portal.siemens.com/productcert/html/ssa-071402.htmlnvd

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000