Summary
A sensitive data exposure vulnerability in SIPROTEC 5 can allow an attacker to retrieve sensitive session data from browser history, logs, or other storage mechanisms, potentially leading to unauthorized access.
Siemens is preparing fix versions and recommends countermeasures for products where fixes are not, or not yet available.
Vulnerabilities 1
-
Medium 5.3
A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V11.0), SIPROTEC 5 6MD85 (CP300) (All v…
Revision history
-
#3
CISA Republication update based on Siemens ProductCERT SSA-904646 advisory
-
#2
Added fix for SIPROTEC 5 CP150, CP300 and SIPROTEC 5 Compact 7SX800 (CP050) devices and added SIPROTEC 5 CP200 devices to Known Not Affected products
-
#1
Publication Date
References
-
SSA-904646: Sensitive Data Exposure Vulnerability in SIPROTEC 5 Devices - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-904646.html
-
ICS Advisory ICSA-25-191-06 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-25-191-06
-
Recommended Practices
https://www.cisa.gov/news-events/ics-alerts/ics-alert-10-301-01
-
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
-
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
-
Recommended Practices
https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
-
Recommended Practices
https://www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b