CPCI85 Central Processing/Communication devices and SICORE Base systems have a vulnerability allowing remote authenticated users or unauthenticated users with physical access to downgrade device firmware to older versions with known vulnerabilities. This issue affects all versions prior to CPCI85 V5.40 and SICORE Base system V1.4.0. The downgrade could enable exploitation of previously patched vulnerabilities.