A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V5.40), SICORE Base system (All versions < V1.4.0). Affected devices allow a remote authenticated user or an unauthenticated user with physical access to downgrade the firmware of the device. This could allow an attacker to downgrade the device to older versions with known vulnerabilities.
CVSS
No CVSS.
References
Configurations
No configuration.
History
22 Jul 2024, 14:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-07-22 14:15
Updated : 2024-07-24 12:55
NVD link : CVE-2024-39601
Mitre link : CVE-2024-39601
JSON object : View
Products Affected
No product.
CWE
CWE-306
Missing Authentication for Critical Function