CVE-2024-53832: A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V05.30). The affected devices contain a secure...
4.6
CVSS
Description
A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V05.30). The affected devices contain a secure element which is connected via an unencrypted SPI bus. This could allow an attacker with physical access to the SPI bus to observe the password used for the secure element authentication, and then use the secure element as an oracle to decrypt all encrypted update files.
Classification
CVE ID: CVE-2024-53832
CVSS Base Severity: MEDIUM
CVSS Base Score: 4.6
Affected Products
Vendor: Siemens
Product: CPCI85 Central Processing/Communication
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.05% (probability of being exploited)
EPSS Percentile: 23.5% (scored less or equal to compared to others)
EPSS Date: 2025-02-03 (when was this score calculated)