Intel

CVE-2026-54799

SICAM: Active Debug Code (CVE-2026-54799)

highEPSS 0.2%

Affected

  • Siemens/SICAM range_unparsed *..8 Products <V26.20

Description

A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V26.20), SICORE Base system (All versions < V26.20.0). The affected application contains a vulnerability in its firmware update mechanism's signature validation process. This could allow an attacker to install malicious firmware, leading to persistent code execution and system compromise.

Source: siemens_advisoryBSI CSAFBSI WID PortalNVD (NIST)CVE.org (MITRE)cvelistv5

Affected products

The following versions are affected. Older releases of the same product line are also vulnerable unless stated otherwise.

SiemensSICAM
8 Products <V26.20

Metrics

XIEM Effective CVSS
8.4
Source: nvd-v4
EPSS percentile
7.3 %
Low — this CVE sits in the lower 10% of all CVEs scored today.
KEV status
—
Show all metrics
Severity
high
Priority score
64.20
Exploit maturity
no public PoC known
CVSS v3
6.7
CVSS v4
8.4
EPSS score
0.2 %
Low — model estimates < 1% exploitation likelihood.
Published
2026-07-09 15:16 UTC
CWE
CWE-489

Weakness classes (CWE)

  • CWE-489Base

    Active Debug Code

    The product is released with debugging code still enabled or active.

    cwe.mitre.org →

References & sources