CVE-2026-54800

A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V26.20), SICORE Base system (All versions < V26.20.0). The affected application ships with a default configuration that disables all OPC UA security mechanisms. This could allow an attacker to gain unauthorized access and control over critical system functions.

Score

CVSS 4.0 6.3 Medium

Status

Awaiting Analysis - productcert@siemens.com

Published

2026-07-09

Last modified

2026-10-23

Weaknesses

CWE-1188

Affected products

• Cpci85 Central Processingcommunication (Siemens)
• Sicore Base System (Siemens)

References

• https://cert-portal.siemens.com/productcert/html/ssa-229470.html