Skip to content
OpenAdvisories
Medium ICSA-26-134-13 1 CVE

Siemens SIPROTEC 5

Published May 12, 2026 · Updated May 14, 2026 · Revision 2

Vendor: Siemens Product: SIPROTEC 5 6MD84 (CP300) Product: SIPROTEC 5 6MD85 (CP200) Product: SIPROTEC 5 6MD85 (CP300) Product: SIPROTEC 5 6MD86 (CP200) Product: SIPROTEC 5 6MD86 (CP300) Product: SIPROTEC 5 6MD89 (CP300) Product: SIPROTEC 5 6MU85 (CP300) Product: SIPROTEC 5 7KE85 (CP200) Product: SIPROTEC 5 7KE85 (CP300) Product: SIPROTEC 5 7SA82 (CP100) Product: SIPROTEC 5 7SA82 (CP150) Product: SIPROTEC 5 7SA84 (CP200) Product: SIPROTEC 5 7SA86 (CP200) Product: SIPROTEC 5 7SA86 (CP300) Product: SIPROTEC 5 7SA87 (CP200) Product: SIPROTEC 5 7SA87 (CP300) Product: SIPROTEC 5 7SD82 (CP100) Product: SIPROTEC 5 7SD82 (CP150) Product: SIPROTEC 5 7SD84 (CP200) Product: SIPROTEC 5 7SD86 (CP200) Product: SIPROTEC 5 7SD86 (CP300) Product: SIPROTEC 5 7SD87 (CP200) Product: SIPROTEC 5 7SD87 (CP300) Product: SIPROTEC 5 7SJ81 (CP100) Product: SIPROTEC 5 7SJ81 (CP150) Product: SIPROTEC 5 7SJ82 (CP100) Product: SIPROTEC 5 7SJ82 (CP150) Product: SIPROTEC 5 7SJ85 (CP200) Product: SIPROTEC 5 7SJ85 (CP300) +34 more

Summary

The SIPROTEC 5 devices do not use sufficiently random numbers to generate session identifiers. This could facilitate a brute-force attack against a valid session identifier which could allow an unauthenticated remote attacker to hijack a valid user session. The affected session identifiers are only used in a subset of the endpoints that are provided by the affected products.

Siemens is preparing fix versions and recommends countermeasures for products where fixes are not, or not yet available.

Vulnerabilities 1

Revision history

  1. #2

    Initial CISA Republication of Siemens ProductCERT SSA-786884 advisory

  2. #1

    Publication Date

References