Description
A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V9.90), SIPROTEC 5 6MD85 (CP300) (All versions >= V8.80 < V9.90), SIPROTEC 5 6MD86 (CP300) (All versions >= V8.80 < V9.90), SIPROTEC 5 6MD89 (CP300) (All versions >= V8.80 < V9.90), SIPROTEC 5 6MD89 (CP300) V9.6x (All versions < V9.68), SIPROTEC 5 6MU85 (CP300) (All versions >= V8.80 < V9.90), SIPROTEC 5 7KE85 (CP300) (All versions >= V8.80 < V10.0), SIPROTEC 5 7SA82 (CP150) (All versions < V9.90), SIPROTEC 5 7SA86 (CP300) (All versions >= V8.80 < V9.90), SIPROTEC 5 7SA87 (CP300) (All versions >= V8.80 < V9.90), SIPROTEC 5 7SD82 (CP150) (All versions < V9.90), SIPROTEC 5 7SD86 (CP300) (All versions >= V8.80 < V9.90), SIPROTEC 5 7SD87 (CP300) (All versions >= V8.80 < V9.90), SIPROTEC 5 7SJ81 (CP150) (All versions < V9.90), SIPROTEC 5 7SJ82 (CP150) (All versions < V9.90), SIPROTEC 5 7SJ85 (CP300) (All versions >= V8.80 < V9.90), SIPROTEC 5 7SJ86 (CP300) (All versions >= V8.80 < V9.90), SIPROTEC 5 7SK82 (CP150) (All versions < V9.90), SIPROTEC 5 7SK85 (CP300) (All versions >= V8.80 < V9.90), SIPROTEC 5 7SL82 (CP150) (All versions < V9.90), SIPROTEC 5 7SL86 (CP300) (All versions >= V8.80 < V9.90), SIPROTEC 5 7SL87 (CP300) (All versions >= V8.80 < V9.90), SIPROTEC 5 7SS85 (CP300) (All versions >= V8.80 < V9.90), SIPROTEC 5 7ST85 (CP300) (All versions >= V8.80 < V10.0), SIPROTEC 5 7ST85 (CP300) V9.6x (All versions < V9.68), SIPROTEC 5 7ST86 (CP300) (All versions < V10.0), SIPROTEC 5 7ST86 (CP300) V9.8x (All versions < V9.83), SIPROTEC 5 7SX82 (CP150) (All versions < V9.90), SIPROTEC 5 7SX85 (CP300) (All versions >= V8.80 < V9.90), SIPROTEC 5 7SY82 (CP150) (All versions < V9.90), SIPROTEC 5 7UM85 (CP300) (All versions >= V8.80 < V9.90), SIPROTEC 5 7UT82 (CP150) (All versions < V9.90), SIPROTEC 5 7UT85 (CP300) (All versions >= V8.80 < V9.90), SIPROTEC 5 7UT86 (CP300) (All versions >= V8.80 < V9.90), SIPROTEC 5 7UT87 (CP300) (All versions >= V8.80 < V9.90), SIPROTEC 5 7VE85 (CP300) (All versions >= V8.80 < V9.90), SIPROTEC 5 7VK87 (CP300) (All versions >= V8.80 < V9.90), SIPROTEC 5 7VU85 (CP300) (All versions < V9.90), SIPROTEC 5 Communication Module ETH-BA-2EL (Rev.2) (All versions < V9.90), SIPROTEC 5 Communication Module ETH-BA-2EL (Rev.2) V9.6 (All versions < V9.68), SIPROTEC 5 Communication Module ETH-BA-2EL (Rev.2) V9.8 (All versions < V9.83), SIPROTEC 5 Communication Module ETH-BB-2FO (Rev. 2) (All versions < V9.90), SIPROTEC 5 Communication Module ETH-BB-2FO (Rev. 2) V9.6 (All versions < V9.68), SIPROTEC 5 Communication Module ETH-BB-2FO (Rev. 2) V9.8 (All versions < V9.83), SIPROTEC 5 Communication Module ETH-BD-2FO (All versions >= V8.80 < V9.90), SIPROTEC 5 Communication Module ETH-BD-2FO V9.6 (All versions < V9.68), SIPROTEC 5 Communication Module ETH-BD-2FO V9.8 (All versions < V9.83), SIPROTEC 5 Compact 7SX800 (CP050) (All versions >= V9.50 < V9.90). Affected devices do not properly validate SNMP GET requests. This could allow an unauthenticated, remote attacker to retrieve sensitive information of the affected devices with SNMPv2 GET requests using default credentials.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | SIPROTEC 5 6MD84 (CP300) | < V9.90 | V9.90 |
| Siemens | SIPROTEC 5 6MD85 (CP300) | V8.80 – < V9.90 | V9.90 |
| Siemens | SIPROTEC 5 6MD86 (CP300) | V8.80 – < V9.90 | V9.90 |
| Siemens | SIPROTEC 5 6MD89 (CP300) | V8.80 – < V9.90 | V9.90 |
| Siemens | SIPROTEC 5 6MD89 (CP300) V9.6x | < V9.68 | V9.68 |
| Siemens | SIPROTEC 5 6MU85 (CP300) | V8.80 – < V9.90 | V9.90 |
| Siemens | SIPROTEC 5 7KE85 (CP300) | V8.80 – < V10.0 | V10.0 |
| Siemens | SIPROTEC 5 7SA82 (CP150) | < V9.90 | V9.90 |
| Siemens | SIPROTEC 5 7SA86 (CP300) | V8.80 – < V9.90 | V9.90 |
| Siemens | SIPROTEC 5 7SA87 (CP300) | V8.80 – < V9.90 | V9.90 |
| Siemens | SIPROTEC 5 7SD82 (CP150) | < V9.90 | V9.90 |
| Siemens | SIPROTEC 5 7SD86 (CP300) | V8.80 – < V9.90 | V9.90 |
| Siemens | SIPROTEC 5 7SD87 (CP300) | V8.80 – < V9.90 | V9.90 |
| Siemens | SIPROTEC 5 7SJ81 (CP150) | < V9.90 | V9.90 |
| Siemens | SIPROTEC 5 7SJ82 (CP150) | < V9.90 | V9.90 |
| Siemens | SIPROTEC 5 7SJ85 (CP300) | V8.80 – < V9.90 | V9.90 |
| Siemens | SIPROTEC 5 7SJ86 (CP300) | V8.80 – < V9.90 | V9.90 |
| Siemens | SIPROTEC 5 7SK82 (CP150) | < V9.90 | V9.90 |
| Siemens | SIPROTEC 5 7SK85 (CP300) | V8.80 – < V9.90 | V9.90 |
| Siemens | SIPROTEC 5 7SL82 (CP150) | < V9.90 | V9.90 |
| Siemens | SIPROTEC 5 7SL86 (CP300) | V8.80 – < V9.90 | V9.90 |
| Siemens | SIPROTEC 5 7SL87 (CP300) | V8.80 – < V9.90 | V9.90 |
| Siemens | SIPROTEC 5 7SS85 (CP300) | V8.80 – < V9.90 | V9.90 |
| Siemens | SIPROTEC 5 7ST85 (CP300) | V8.80 – < V10.0 | V10.0 |
| Siemens | SIPROTEC 5 7ST85 (CP300) V9.6x | < V9.68 | V9.68 |
| Siemens | SIPROTEC 5 7ST86 (CP300) | < V10.0 | V10.0 |
| Siemens | SIPROTEC 5 7ST86 (CP300) V9.8x | < V9.83 | V9.83 |
| Siemens | SIPROTEC 5 7SX82 (CP150) | < V9.90 | V9.90 |
| Siemens | SIPROTEC 5 7SX85 (CP300) | V8.80 – < V9.90 | V9.90 |
| Siemens | SIPROTEC 5 7SY82 (CP150) | < V9.90 | V9.90 |
| Siemens | SIPROTEC 5 7UM85 (CP300) | V8.80 – < V9.90 | V9.90 |
| Siemens | SIPROTEC 5 7UT82 (CP150) | < V9.90 | V9.90 |
| Siemens | SIPROTEC 5 7UT85 (CP300) | V8.80 – < V9.90 | V9.90 |
| Siemens | SIPROTEC 5 7UT86 (CP300) | V8.80 – < V9.90 | V9.90 |
| Siemens | SIPROTEC 5 7UT87 (CP300) | V8.80 – < V9.90 | V9.90 |
| Siemens | SIPROTEC 5 7VE85 (CP300) | V8.80 – < V9.90 | V9.90 |
| Siemens | SIPROTEC 5 7VK87 (CP300) | V8.80 – < V9.90 | V9.90 |
| Siemens | SIPROTEC 5 7VU85 (CP300) | < V9.90 | V9.90 |
| Siemens | SIPROTEC 5 Communication Module ETH-BA-2EL (Rev.2) | < V9.90 | V9.90 |
| Siemens | SIPROTEC 5 Communication Module ETH-BA-2EL (Rev.2) V9.6 | < V9.68 | V9.68 |
| Siemens | SIPROTEC 5 Communication Module ETH-BA-2EL (Rev.2) V9.8 | < V9.83 | V9.83 |
| Siemens | SIPROTEC 5 Communication Module ETH-BB-2FO (Rev. 2) | < V9.90 | V9.90 |
| Siemens | SIPROTEC 5 Communication Module ETH-BB-2FO (Rev. 2) V9.6 | < V9.68 | V9.68 |
| Siemens | SIPROTEC 5 Communication Module ETH-BB-2FO (Rev. 2) V9.8 | < V9.83 | V9.83 |
| Siemens | SIPROTEC 5 Communication Module ETH-BD-2FO | V8.80 – < V9.90 | V9.90 |
| Siemens | SIPROTEC 5 Communication Module ETH-BD-2FO V9.6 | < V9.68 | V9.68 |
| Siemens | SIPROTEC 5 Communication Module ETH-BD-2FO V9.8 | < V9.83 | V9.83 |
| Siemens | SIPROTEC 5 Compact 7SX800 (CP050) | V9.50 – < V9.90 | V9.90 |
Advisories 5
- ICSA-25-044-05 Siemens SIPROTEC 5 Devices CISA ICS & IT advisories · Aug 12, 2025
- SSA-767615 SSA-767615: Information Disclosure Vulnerability in SIPROTEC 5 Devices Siemens ProductCERT · Aug 12, 2025
- NCSC-2025-0061 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Feb 14, 2025
- NCSC-2025-0051 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Feb 11, 2025
- WID-SEC-2025-0313 Siemens SIPROTEC: Mehrere Schwachstellen BSI CERT-Bund (WID) · Feb 10, 2025