Skip to content
OpenAdvisories
Medium SSA-904646 1 CVE

SSA-904646: Sensitive Data Exposure Vulnerability in SIPROTEC 5 Devices

Published Jul 8, 2025 · Updated Nov 10, 2026 · Revision 3

Vendor: Siemens Product: SIPROTEC 5 6MD84 (CP300) Product: SIPROTEC 5 6MD85 (CP200) Product: SIPROTEC 5 6MD85 (CP300) Product: SIPROTEC 5 6MD86 (CP200) Product: SIPROTEC 5 6MD86 (CP300) Product: SIPROTEC 5 6MD89 (CP300) Product: SIPROTEC 5 6MD89 (CP300) V9.6x Product: SIPROTEC 5 6MU85 (CP300) Product: SIPROTEC 5 7KE85 (CP200) Product: SIPROTEC 5 7KE85 (CP300) Product: SIPROTEC 5 7SA82 (CP100) Product: SIPROTEC 5 7SA82 (CP150) Product: SIPROTEC 5 7SA84 (CP200) Product: SIPROTEC 5 7SA86 (CP200) Product: SIPROTEC 5 7SA86 (CP300) Product: SIPROTEC 5 7SA87 (CP200) Product: SIPROTEC 5 7SA87 (CP300) Product: SIPROTEC 5 7SD82 (CP100) Product: SIPROTEC 5 7SD82 (CP150) Product: SIPROTEC 5 7SD84 (CP200) Product: SIPROTEC 5 7SD86 (CP200) Product: SIPROTEC 5 7SD86 (CP300) Product: SIPROTEC 5 7SD87 (CP200) Product: SIPROTEC 5 7SD87 (CP300) Product: SIPROTEC 5 7SJ81 (CP100) Product: SIPROTEC 5 7SJ81 (CP150) Product: SIPROTEC 5 7SJ82 (CP100) Product: SIPROTEC 5 7SJ82 (CP150) Product: SIPROTEC 5 7SJ85 (CP200) +35 more

Summary

A sensitive data exposure vulnerability in SIPROTEC 5 can allow an attacker to retrieve sensitive session data from browser history, logs, or other storage mechanisms, potentially leading to unauthorized access.

Siemens has released new versions for the affected products and recommends to update to the latest versions.

Vulnerabilities 1

Revision history

  1. #3

    Added fix for SIPROTEC 5 CP100 devices

  2. #2

    Added fix for SIPROTEC 5 CP150, CP300 and SIPROTEC 5 Compact 7SX800 (CP050) devices and added SIPROTEC 5 CP200 devices to Known Not Affected products

  3. #1

    Publication Date

References