Skip to content
OpenAdvisories
Medium · 5.3 CVE-2025-40742 EUVD-2025-20427GHSA-2qhm-4w63-5pph

A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V11.0), SIPROTEC 5 6MD85 (CP300) (All versions < V11.0), SI…

Published Jul 8, 2025 · Updated Nov 10, 2026 · Assigned by siemens

Vendor: Siemens Product: SIPROTEC 5 6MD84 (CP300) Product: SIPROTEC 5 6MD85 (CP200) Product: SIPROTEC 5 6MD85 (CP300) Product: SIPROTEC 5 6MD86 (CP200) Product: SIPROTEC 5 6MD86 (CP300) Product: SIPROTEC 5 6MD89 (CP300) Product: SIPROTEC 5 6MD89 (CP300) V9.6x Product: SIPROTEC 5 6MU85 (CP300) Product: SIPROTEC 5 7KE85 (CP200) Product: SIPROTEC 5 7KE85 (CP300) Product: SIPROTEC 5 7SA82 (CP100) Product: SIPROTEC 5 7SA82 (CP150) Product: SIPROTEC 5 7SA84 (CP200) Product: SIPROTEC 5 7SA86 (CP200) Product: SIPROTEC 5 7SA86 (CP300) Product: SIPROTEC 5 7SA87 (CP200) Product: SIPROTEC 5 7SA87 (CP300) Product: SIPROTEC 5 7SD82 (CP100) Product: SIPROTEC 5 7SD82 (CP150) Product: SIPROTEC 5 7SD84 (CP200) Product: SIPROTEC 5 7SD86 (CP200) Product: SIPROTEC 5 7SD86 (CP300) Product: SIPROTEC 5 7SD87 (CP200) Product: SIPROTEC 5 7SD87 (CP300) Product: SIPROTEC 5 7SJ81 (CP100) Product: SIPROTEC 5 7SJ81 (CP150) Product: SIPROTEC 5 7SJ82 (CP100) Product: SIPROTEC 5 7SJ82 (CP150) Product: SIPROTEC 5 7SJ85 (CP200) Product: SIPROTEC 5 7SJ85 (CP300) Product: SIPROTEC 5 7SJ86 (CP200) Product: SIPROTEC 5 7SJ86 (CP300) Product: SIPROTEC 5 7SK82 (CP100) Product: SIPROTEC 5 7SK82 (CP150) Product: SIPROTEC 5 7SK85 (CP200) Product: SIPROTEC 5 7SK85 (CP300) Product: SIPROTEC 5 7SL82 (CP100) Product: SIPROTEC 5 7SL82 (CP150) Product: SIPROTEC 5 7SL86 (CP200) Product: SIPROTEC 5 7SL86 (CP300) Product: SIPROTEC 5 7SL87 (CP200) Product: SIPROTEC 5 7SL87 (CP300) Product: SIPROTEC 5 7SS85 (CP200) Product: SIPROTEC 5 7SS85 (CP300) Product: SIPROTEC 5 7ST85 (CP200) Product: SIPROTEC 5 7ST85 (CP300) Product: SIPROTEC 5 7ST86 (CP300) Product: SIPROTEC 5 7SX82 (CP150) Product: SIPROTEC 5 7SX85 (CP300) Product: SIPROTEC 5 7SY82 (CP150) Category: ICS / OT

Description

A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V11.0), SIPROTEC 5 6MD85 (CP300) (All versions < V11.0), SIPROTEC 5 6MD86 (CP300) (All versions < V11.0), SIPROTEC 5 6MD89 (CP300) (All versions < V11.0), SIPROTEC 5 6MD89 (CP300) V9.6x (All versions < V11.0), SIPROTEC 5 6MU85 (CP300) (All versions < V11.0), SIPROTEC 5 7KE85 (CP300) (All versions < V11.0), SIPROTEC 5 7SA82 (CP100) (All versions < V8.91), SIPROTEC 5 7SA82 (CP150) (All versions < V11.0), SIPROTEC 5 7SA86 (CP300) (All versions < V11.0), SIPROTEC 5 7SA87 (CP300) (All versions < V11.0), SIPROTEC 5 7SD82 (CP100) (All versions < V8.91), SIPROTEC 5 7SD82 (CP150) (All versions < V11.0), SIPROTEC 5 7SD86 (CP300) (All versions < V11.0), SIPROTEC 5 7SD87 (CP300) (All versions < V11.0), SIPROTEC 5 7SJ81 (CP100) (All versions < V8.91), SIPROTEC 5 7SJ81 (CP150) (All versions < V11.0), SIPROTEC 5 7SJ82 (CP100) (All versions < V8.91), SIPROTEC 5 7SJ82 (CP150) (All versions < V11.0), SIPROTEC 5 7SJ85 (CP300) (All versions < V11.0), SIPROTEC 5 7SJ86 (CP300) (All versions < V11.0), SIPROTEC 5 7SK82 (CP100) (All versions < V8.91), SIPROTEC 5 7SK82 (CP150) (All versions < V11.0), SIPROTEC 5 7SK85 (CP300) (All versions < V11.0), SIPROTEC 5 7SL82 (CP100) (All versions < V8.91), SIPROTEC 5 7SL82 (CP150) (All versions < V11.0), SIPROTEC 5 7SL86 (CP300) (All versions < V11.0), SIPROTEC 5 7SL87 (CP300) (All versions < V11.0), SIPROTEC 5 7SS85 (CP300) (All versions < V11.0), SIPROTEC 5 7ST85 (CP300) (All versions < V11.0), SIPROTEC 5 7ST86 (CP300) (All versions < V11.0), SIPROTEC 5 7SX82 (CP150) (All versions < V11.0), SIPROTEC 5 7SX85 (CP300) (All versions < V11.0), SIPROTEC 5 7SY82 (CP150) (All versions < V11.0), SIPROTEC 5 7UM85 (CP300) (All versions < V11.0), SIPROTEC 5 7UT82 (CP100) (All versions < V8.91), SIPROTEC 5 7UT82 (CP150) (All versions < V11.0), SIPROTEC 5 7UT85 (CP300) (All versions < V11.0), SIPROTEC 5 7UT86 (CP300) (All versions < V11.0), SIPROTEC 5 7UT87 (CP300) (All versions < V11.0), SIPROTEC 5 7VE85 (CP300) (All versions < V11.0), SIPROTEC 5 7VK87 (CP300) (All versions < V11.0), SIPROTEC 5 7VU85 (CP300) (All versions < V11.0), SIPROTEC 5 Compact 7SX800 (CP050) (All versions < V11.0). The affected devices include session identifiers in URL requests for certain functionalities. This could allow an attacker to retrieve sensitive session data from browser history, logs, or other storage mechanisms, potentially leading to unauthorized access.

Affected products

VendorProductAffectedFixed
Siemens SIPROTEC 5 6MD84 (CP300) < V11.0 V11.0
Siemens SIPROTEC 5 6MD85 (CP200) — —
Siemens SIPROTEC 5 6MD85 (CP300) < V11.0 V11.0
Siemens SIPROTEC 5 6MD86 (CP200) — —
Siemens SIPROTEC 5 6MD86 (CP300) < V11.0 V11.0
Siemens SIPROTEC 5 6MD89 (CP300) < V11.0 V11.0
Siemens SIPROTEC 5 6MD89 (CP300) V9.6x < V11.0 V11.0
Siemens SIPROTEC 5 6MU85 (CP300) < V11.0 V11.0
Siemens SIPROTEC 5 7KE85 (CP200) — —
Siemens SIPROTEC 5 7KE85 (CP300) < V11.0 V11.0
Siemens SIPROTEC 5 7SA82 (CP100) < V8.91 V8.91
Siemens SIPROTEC 5 7SA82 (CP150) < V11.0 V11.0
Siemens SIPROTEC 5 7SA84 (CP200) — —
Siemens SIPROTEC 5 7SA86 (CP200) — —
Siemens SIPROTEC 5 7SA86 (CP300) < V11.0 V11.0
Siemens SIPROTEC 5 7SA87 (CP200) — —
Siemens SIPROTEC 5 7SA87 (CP300) < V11.0 V11.0
Siemens SIPROTEC 5 7SD82 (CP100) < V8.91 V8.91
Siemens SIPROTEC 5 7SD82 (CP150) < V11.0 V11.0
Siemens SIPROTEC 5 7SD84 (CP200) — —
Siemens SIPROTEC 5 7SD86 (CP200) — —
Siemens SIPROTEC 5 7SD86 (CP300) < V11.0 V11.0
Siemens SIPROTEC 5 7SD87 (CP200) — —
Siemens SIPROTEC 5 7SD87 (CP300) < V11.0 V11.0
Siemens SIPROTEC 5 7SJ81 (CP100) < V8.91 V8.91
Siemens SIPROTEC 5 7SJ81 (CP150) < V11.0 V11.0
Siemens SIPROTEC 5 7SJ82 (CP100) < V8.91 V8.91
Siemens SIPROTEC 5 7SJ82 (CP150) < V11.0 V11.0
Siemens SIPROTEC 5 7SJ85 (CP200) — —
Siemens SIPROTEC 5 7SJ85 (CP300) < V11.0 V11.0
Siemens SIPROTEC 5 7SJ86 (CP200) — —
Siemens SIPROTEC 5 7SJ86 (CP300) < V11.0 V11.0
Siemens SIPROTEC 5 7SK82 (CP100) < V8.91 V8.91
Siemens SIPROTEC 5 7SK82 (CP150) < V11.0 V11.0
Siemens SIPROTEC 5 7SK85 (CP200) — —
Siemens SIPROTEC 5 7SK85 (CP300) < V11.0 V11.0
Siemens SIPROTEC 5 7SL82 (CP100) < V8.91 V8.91
Siemens SIPROTEC 5 7SL82 (CP150) < V11.0 V11.0
Siemens SIPROTEC 5 7SL86 (CP200) — —
Siemens SIPROTEC 5 7SL86 (CP300) < V11.0 V11.0
Siemens SIPROTEC 5 7SL87 (CP200) — —
Siemens SIPROTEC 5 7SL87 (CP300) < V11.0 V11.0
Siemens SIPROTEC 5 7SS85 (CP200) — —
Siemens SIPROTEC 5 7SS85 (CP300) < V11.0 V11.0
Siemens SIPROTEC 5 7ST85 (CP200) — —
Siemens SIPROTEC 5 7ST85 (CP300) < V11.0 V11.0
Siemens SIPROTEC 5 7ST86 (CP300) < V11.0 V11.0
Siemens SIPROTEC 5 7SX82 (CP150) < V11.0 V11.0
Siemens SIPROTEC 5 7SX85 (CP300) < V11.0 V11.0
Siemens SIPROTEC 5 7SY82 (CP150) < V11.0 V11.0
Siemens SIPROTEC 5 7UM85 (CP300) < V11.0 V11.0
Siemens SIPROTEC 5 7UT82 (CP100) < V8.91 V8.91
Siemens SIPROTEC 5 7UT82 (CP150) < V11.0 V11.0
Siemens SIPROTEC 5 7UT85 (CP200) — —
Siemens SIPROTEC 5 7UT85 (CP300) < V11.0 V11.0
Siemens SIPROTEC 5 7UT86 (CP200) — —
Siemens SIPROTEC 5 7UT86 (CP300) < V11.0 V11.0
Siemens SIPROTEC 5 7UT87 (CP200) — —
Siemens SIPROTEC 5 7UT87 (CP300) < V11.0 V11.0
Siemens SIPROTEC 5 7VE85 (CP300) < V11.0 V11.0
Siemens SIPROTEC 5 7VK87 (CP200) — —
Siemens SIPROTEC 5 7VK87 (CP300) < V11.0 V11.0
Siemens SIPROTEC 5 7VU85 (CP300) < V11.0 V11.0
Siemens SIPROTEC 5 Compact 7SX800 (CP050) < V11.0 V11.0

Advisories 4

References