Summary
SIPROTEC 5 devices contain a null pointer dereference vulnerability in the web service. This could allow an attacker to send unauthenticated maliciously crafted http request that could cause denial of service condition of the device.
Siemens has released new versions for the affected products and recommends to update to the latest versions.
Vulnerabilities 1
-
High 7.5
A vulnerability has been identified in SIPROTEC 5 6MD85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 6MD86 (CP30…
Revision history
-
#6
Added fix for SIPROTEC 5 7SA82 (CP100), SIPROTEC 5 7SD82 (CP100), SIPROTEC 5 7SL82 (CP100) and SIPROTEC 5 7UT82 (CP100)
-
#5
Added fix for SIPROTEC 5 7SJ81 (CP100), SIPROTEC 5 7SJ82 (CP100), SIPROTEC 5 7SK82 (CP100), SIPROTEC 5 Communication Module ETH-BA-2EL (installed on CP100 devices), SIPROTEC 5 Communication Module ETH-BB-2FO (installed on CP100 devices); Clarified that currently no fix is available for SIPROTEC 5 7SA82 (CP100), SIPROTEC 5 7SD82 (CP100), SIPROTEC 5 7SL82 (CP100), SIPROTEC 5 7UT82 (CP100)
-
#4
Adjusted fix version for SIPROTEC 5 6MD89 (CP300) and SIPROTEC 5 7ST85 (CP300)
-
#3
Added fix for SIPROTEC 5 6MD89 (CP300) and SIPROTEC 5 7ST85 (CP300)
-
#2
Removed all non-impacted CP200 devices; added introduced version to CP300 devices; added additional mitigation measure
-
#1
Publication Date
References
-
SSA-322980: Denial of Service Vulnerability in SIPROTEC 5 Devices - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-322980.html