SSA-847986 — SSA-847986: Denial-of-Service Vulnerabilities in SIPROTEC 5 relays

Summary

The latest update for SIPROTEC 5 relays fixes two vulnerabilities that could allow a remote attacker to cause a denial-of-service or potentially trigger a remote code execution under certain circumstances.

Siemens has released an update for SIPROTEC 5 relays and recommends to update to the latest version.

Vulnerabilities 2

Unscored —

CVE-2021-33719

A vulnerability has been identified in SIPROTEC 5 relays with CPU variants CP050 (All versions < V8.80), SIPROTEC 5 rel…

Siemens SIPROTEC 5 relays with CPU variants CP050 SIPROTEC 5 relays with CPU variants CP300 SIPROTEC 5 relays with CPU variants CP100 ICS / OT

Sep 14, 2021
Unscored —

CVE-2021-33720

A vulnerability has been identified in SIPROTEC 5 relays with CPU variants CP050 (All versions < V8.80), SIPROTEC 5 rel…

Siemens SIPROTEC 5 relays with CPU variants CP050 SIPROTEC 5 relays with CPU variants CP300 SIPROTEC 5 relays with CPU variants CP100 ICS / OT

Sep 14, 2021

Revision history

2021-10-12 #2
Removed CP200 from list of affected products
2021-09-14 #1
Publication Date

References

SSA-847986: Denial-of-Service Vulnerabilities in SIPROTEC 5 relays - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-847986.pdf
SSA-847986: Denial-of-Service Vulnerabilities in SIPROTEC 5 relays - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-847986.txt