Skip to content
OpenAdvisories
Medium SSA-194557 1 CVE

SSA-194557: Improper Limitation of Filesystem Access through Web Server Vulnerability in SIPROTEC 5

Published Jan 14, 2025 · Updated Nov 11, 2025 · Revision 4

Vendor: Siemens Product: SIPROTEC 5 6MD84 (CP300) Product: SIPROTEC 5 6MD85 (CP300) Product: SIPROTEC 5 6MD86 (CP300) Product: SIPROTEC 5 6MD89 (CP300) Product: SIPROTEC 5 6MU85 (CP300) Product: SIPROTEC 5 7KE85 (CP300) Product: SIPROTEC 5 7SA82 (CP100) Product: SIPROTEC 5 7SA82 (CP150) Product: SIPROTEC 5 7SA86 (CP300) Product: SIPROTEC 5 7SA87 (CP300) Product: SIPROTEC 5 7SD82 (CP100) Product: SIPROTEC 5 7SD82 (CP150) Product: SIPROTEC 5 7SD86 (CP300) Product: SIPROTEC 5 7SD87 (CP300) Product: SIPROTEC 5 7SJ81 (CP100) Product: SIPROTEC 5 7SJ81 (CP150) Product: SIPROTEC 5 7SJ82 (CP100) Product: SIPROTEC 5 7SJ82 (CP150) Product: SIPROTEC 5 7SJ85 (CP300) Product: SIPROTEC 5 7SJ86 (CP300) Product: SIPROTEC 5 7SK82 (CP100) Product: SIPROTEC 5 7SK82 (CP150) Product: SIPROTEC 5 7SK85 (CP300) Product: SIPROTEC 5 7SL82 (CP100) Product: SIPROTEC 5 7SL82 (CP150) Product: SIPROTEC 5 7SL86 (CP300) Product: SIPROTEC 5 7SL87 (CP300) Product: SIPROTEC 5 7SS85 (CP300) Product: SIPROTEC 5 7ST85 (CP300) +14 more

Summary

Affected SIPROTEC 5 devices do not properly limit the access of the web server to the filesystem. This could allow an authenticated remote attacker to read arbitrary files or the entire filesystem of the device.

Siemens has released new versions for the affected products and recommends to update to the latest versions.

Vulnerabilities 1

Revision history

  1. #4

    Added fix for SIPROTEC 5 7SA82 (CP100), SIPROTEC 5 7SD82 (CP100), SIPROTEC 5 7SJ81 (CP100), SIPROTEC 5 7SJ82 (CP100), SIPROTEC 5 7SK82 (CP100), SIPROTEC 5 7SL82 (CP100), SIPROTEC 5 7UT82 (CP100)

  2. #3

    Added fix for SIPROTEC 5 7ST85 (CP300); Changed fix version for SIPROTEC 5 6MD89 (CP300) from V9.90 to V9.68; Added mitigation

  3. #2

    Added fix version for 6MD89 (CP300)

  4. #1

    Publication Date

References