Skip to content
OpenAdvisories
High SSA-767615 1 CVE

SSA-767615: Information Disclosure Vulnerability in SIPROTEC 5 Devices

Published Feb 11, 2025 · Updated Aug 12, 2025 · Revision 5

Vendor: Siemens Product: SIPROTEC 5 6MD84 (CP300) Product: SIPROTEC 5 6MD85 (CP300) Product: SIPROTEC 5 6MD86 (CP300) Product: SIPROTEC 5 6MD89 (CP300) Product: SIPROTEC 5 6MD89 (CP300) V9.6x Product: SIPROTEC 5 6MU85 (CP300) Product: SIPROTEC 5 7KE85 (CP300) Product: SIPROTEC 5 7SA82 (CP150) Product: SIPROTEC 5 7SA86 (CP300) Product: SIPROTEC 5 7SA87 (CP300) Product: SIPROTEC 5 7SD82 (CP150) Product: SIPROTEC 5 7SD86 (CP300) Product: SIPROTEC 5 7SD87 (CP300) Product: SIPROTEC 5 7SJ81 (CP150) Product: SIPROTEC 5 7SJ82 (CP150) Product: SIPROTEC 5 7SJ85 (CP300) Product: SIPROTEC 5 7SJ86 (CP300) Product: SIPROTEC 5 7SK82 (CP150) Product: SIPROTEC 5 7SK85 (CP300) Product: SIPROTEC 5 7SL82 (CP150) Product: SIPROTEC 5 7SL86 (CP300) Product: SIPROTEC 5 7SL87 (CP300) Product: SIPROTEC 5 7SS85 (CP300) Product: SIPROTEC 5 7ST85 (CP300) Product: SIPROTEC 5 7ST85 (CP300) V9.6x Product: SIPROTEC 5 7ST86 (CP300) Product: SIPROTEC 5 7ST86 (CP300) V9.8x Product: SIPROTEC 5 7SX82 (CP150) Product: SIPROTEC 5 7SX85 (CP300) +19 more

Summary

An information disclosure vulnerability in SIPROTEC 5 devices could allow an unauthenticated, remote attacker to retrieve sensitive information of the device.

Siemens has released new versions for the affected products and recommends to update to the latest versions.

Vulnerabilities 1

Revision history

  1. #5

    Added fix for SIPROTEC 5 7KE85 (CP300); moved information about fixes in several products' version lines from chapter 'Additional Information' to the list of known affected products

  2. #4

    Added fix for SIPROTEC 5 7ST86 (CP300); Added additional information regarding fix version V9.83 for parallel version line V9.8x

  3. #3

    Added additional information regarding fix version V9.68 for parallel version line V9.6x

  4. #2

    Added fix for SIPROTEC 5 7ST85 (CP300); Changed fix version for SIPROTEC 5 6MD89 (CP300) from V9.90 to V9.68

  5. #1

    Publication Date

References