Skip to content
OpenAdvisories
Medium SSA-439673 1 CVE

SSA-439673: Information Disclosure Vulnerability in SIPROTEC 5 Devices

Published Jan 11, 2022 · Updated Jan 11, 2022

Vendor: Siemens Product: SIPROTEC 5 6MD85 devices (CPU variant CP300) Product: SIPROTEC 5 6MD86 devices (CPU variant CP300) Product: SIPROTEC 5 6MD89 devices (CPU variant CP300) Product: SIPROTEC 5 6MU85 devices (CPU variant CP300) Product: SIPROTEC 5 7KE85 devices (CPU variant CP300) Product: SIPROTEC 5 7SA82 devices (CPU variant CP100) Product: SIPROTEC 5 7SA86 devices (CPU variant CP300) Product: SIPROTEC 5 7SA87 devices (CPU variant CP300) Product: SIPROTEC 5 7SD82 devices (CPU variant CP100) Product: SIPROTEC 5 7SD86 devices (CPU variant CP300) Product: SIPROTEC 5 7SD87 devices (CPU variant CP300) Product: SIPROTEC 5 7SJ81 devices (CPU variant CP100) Product: SIPROTEC 5 7SJ82 devices (CPU variant CP100) Product: SIPROTEC 5 7SJ85 devices (CPU variant CP300) Product: SIPROTEC 5 7SJ86 devices (CPU variant CP300) Product: SIPROTEC 5 7SK82 devices (CPU variant CP100) Product: SIPROTEC 5 7SK85 devices (CPU variant CP300) Product: SIPROTEC 5 7SL82 devices (CPU variant CP100) Product: SIPROTEC 5 7SL86 devices (CPU variant CP300) Product: SIPROTEC 5 7SL87 devices (CPU variant CP300) Product: SIPROTEC 5 7SS85 devices (CPU variant CP300) Product: SIPROTEC 5 7ST85 devices (CPU variant CP300) Product: SIPROTEC 5 7SX85 devices (CPU variant CP300) Product: SIPROTEC 5 7UM85 devices (CPU variant CP300) Product: SIPROTEC 5 7UT82 devices (CPU variant CP100) Product: SIPROTEC 5 7UT85 devices (CPU variant CP300) Product: SIPROTEC 5 7UT86 devices (CPU variant CP300) Product: SIPROTEC 5 7UT87 devices (CPU variant CP300) Product: SIPROTEC 5 7VE85 devices (CPU variant CP300) +2 more

Summary

An information disclosure vulnerability in SIPROTEC 5 products could allow an unauthenticated attacker to read device information.

Only devices with the hardware variants CP050, CP100 and CP300 are affected. The DIGSI engineering tool can be used to identify the hardware version of your devices.

Siemens has released updates for the affected products and recommends to update to the latest versions.

Vulnerabilities 1

Revision history

  1. #1

    Publication Date

References