Description
A vulnerability has been identified in SIPROTEC 5 relays with CPU variants CP050 (All versions < V8.80), SIPROTEC 5 relays with CPU variants CP100 (All versions < V8.80), SIPROTEC 5 relays with CPU variants CP300 (All versions < V8.80). Received webpackets are not properly processed. An unauthenticated remote attacker with access to any of the Ethernet interfaces could send specially crafted packets to force a restart of the target device.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | SIPROTEC 5 relays with CPU variants CP050 | All versions < V8.80 | — |
| Siemens | SIPROTEC 5 relays with CPU variants CP100 | All versions < V8.80 | — |
| Siemens | SIPROTEC 5 relays with CPU variants CP300 | All versions < V8.80 | — |
Advisories 2
- ICSA-21-257-16 Siemens SIPROTEC 5 (Update A) CISA ICS & IT advisories · May 6, 2025
- SSA-500748 SSA-500748: Denial-of-Service Vulnerabilities in SIPROTEC 5 Devices Siemens ProductCERT · Oct 12, 2021