SB
Product
SICORE Base system
6
CVEs
0
On KEV
9.0
Max CVSS
0
New 30D
VulnerabilityHigh
Siemens SICAM 8
View CSAF
Summary
Multiple SICAM 8 products are affected by multiple vulnerabilities that could lead to denial of service, namely: - SICAM A8000 Device firmware - CPCI85 for CP-8031/CP-8050 - SICORE for CP-8010/CP-8012 - SICAM EGS Device firmware - CPCI85 - SICAM S8000 - SICORE Siemens has released new versions for the affected products and recommends to update to the latest versions.
The following versions of Siemens SICAM 8 are affected:
CPCI85 Central Processing/Communication vers:intdot/<26.20 (CVE-2026-54798, CVE-2026-54799, CVE-2026-54800, CVE-2026-54801)
SICORE Base system vers:intdot/<26.20.0 (CVE-2026-54798, CVE-2026-54799, CVE-2026-54800, CVE-2026-54801)
CVSS
Vendor
Equipment
Vulnerabilities
v3 7.2
Siemens
Siemens SICAM 8
Active Debug Code, Initialization of a Resource with an Insecure Default, Unverified Password Change
Background
Critical Infrastructure Sectors: Critical Manufacturing, Energy
Countries/Areas Deployed: Worldwide
Company Headquarters Location: Germany
Vulnerabilities
Expand All +
CVE-2026-54798
The affected application includes a debugging interface that is accessible through HTTP endpoints. This could allow an authenticated attacker to disrupt the system by crashing the web process causing denial of service conditions.
View CVE Details
Affected Products
Siemens SICAM 8
Vendor: Siemens
Product Version: CPCI85 Central Processing/C...
Jul 16, 2026·CISA Advisories
VulnerabilityHigh
Siemens SICAM 8 Products
View CSAF
Summary
Multiple SICAM 8 products are affected by multiple vulnerabilities that could lead to denial of service, namely: - SICAM A8000 Device firmware - CPCI85 for CP-8031/CP-8050 - SICORE for CP-8010/CP-8012 - RTUM85 for CP-8010/CP-8012 - SICAM EGS Device firmware - CPCI85 - SICAM S8000 - SICORE - RTUM85 Siemens has released new versions for the affected products and recommends to update to the latest versions.
The following versions of Siemens SICAM 8 Products are affected:
CPCI85 Central Processing/Communication vers:intdot/<26.10 (CVE-2026-27663, CVE-2026-27664)
RTUM85 RTU Base vers:intdot/<26.10 (CVE-2026-27663)
SICORE Base system vers:intdot/<26.10.0 (CVE-2026-27664)
CVSS
Vendor
Equipment
Vulnerabilities
v3 7.5
Siemens
Siemens SICAM 8 Products
Allocation of Resources Without Limits or Throttling, Out-of-bounds Write
Background
Critical Infrastructure Sectors: Critical Manufacturing
Countries/Areas Deployed: Worldwide
Company Headquarters Location: Germany
Vulnerabilities
Expand All +
CVE-2026-27663
The affected application contains denial-of-service (DoS) vulnerability. The remote operation mode is susceptible to a resource exhaustion condition when subjected to a high volume of requests. Sending multiple requests can exhaust resources, preventing parameterization and requiring a reset or reboot to restore functionality.
View CVE Details
Affe...
Apr 2, 2026·CISA Advisories
