Skip to content
OpenAdvisories
Medium SSA-552874 1 CVE

SSA-552874: Denial of Service Vulnerability in SIPROTEC 5 Devices

Published Dec 13, 2022 · Updated Nov 11, 2025 · Revision 6

Vendor: Siemens Product: SIPROTEC 5 6MD84 (CP300) Product: SIPROTEC 5 6MD85 (CP200) Product: SIPROTEC 5 6MD85 (CP300) Product: SIPROTEC 5 6MD86 (CP200) Product: SIPROTEC 5 6MD86 (CP300) Product: SIPROTEC 5 6MD89 (CP300) Product: SIPROTEC 5 6MU85 (CP300) Product: SIPROTEC 5 7KE85 (CP200) Product: SIPROTEC 5 7KE85 (CP300) Product: SIPROTEC 5 7SA82 (CP100) Product: SIPROTEC 5 7SA82 (CP150) Product: SIPROTEC 5 7SA84 (CP200) Product: SIPROTEC 5 7SA86 (CP200) Product: SIPROTEC 5 7SA86 (CP300) Product: SIPROTEC 5 7SA87 (CP200) Product: SIPROTEC 5 7SA87 (CP300) Product: SIPROTEC 5 7SD82 (CP100) Product: SIPROTEC 5 7SD82 (CP150) Product: SIPROTEC 5 7SD84 (CP200) Product: SIPROTEC 5 7SD86 (CP200) Product: SIPROTEC 5 7SD86 (CP300) Product: SIPROTEC 5 7SD87 (CP200) Product: SIPROTEC 5 7SD87 (CP300) Product: SIPROTEC 5 7SJ81 (CP100) Product: SIPROTEC 5 7SJ81 (CP150) Product: SIPROTEC 5 7SJ82 (CP100) Product: SIPROTEC 5 7SJ82 (CP150) Product: SIPROTEC 5 7SJ85 (CP200) Product: SIPROTEC 5 7SJ85 (CP300) +36 more

Summary

Devices of the SIPROTEC 5 family contain a vulnerability related to secure client-initiated renegotiation. This could allow an unauthenticated attacker to cause a denial of service condition for the duration of the attack.

Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.

Vulnerabilities 1

Revision history

  1. #6

    Added fix for SIPROTEC 5 7SA82 (CP100), SIPROTEC 5 7SD82 (CP100), SIPROTEC 5 7SL82 (CP100) and SIPROTEC 5 7UT82 (CP100)

  2. #5

    Added fix for SIPROTEC 5 7SJ81 (CP100), SIPROTEC 5 7SJ82 (CP100), SIPROTEC 5 7SK82 (CP100), SIPROTEC 5 Communication Module ETH-BA-2EL (installed on CP100 devices), SIPROTEC 5 Communication Module ETH-BB-2FO (installed on CP100 devices); Clarified that currently no fix is available for SIPROTEC 5 7SA82 (CP100), SIPROTEC 5 7SD82 (CP100), SIPROTEC 5 7SL82 (CP100), SIPROTEC 5 7UT82 (CP100)

  3. #4

    Adjusted fix version for SIPROTEC 5 6MD89 (CP300), SIPROTEC 5 7KE85 (CP300), SIPROTEC 5 7ST85 (CP300) and SIPROTEC 5 7ST86 (CP300)

  4. #3

    Added fix for SIPROTEC 5 6MD89 (CP300), SIPROTEC 5 7KE85 (CP300), SIPROTEC 5 7ST85 (CP300) and SIPROTEC 5 7ST86 (CP300)

  5. #2

    Added fix for multiple devices; Corrected affected products list

  6. #1

    Publication Date

References