Description
A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V11.0), SIPROTEC 5 6MD85 (CP300) (All versions < V11.0), SIPROTEC 5 6MD86 (CP300) (All versions < V11.0), SIPROTEC 5 6MD89 (CP300) (All versions < V11.0), SIPROTEC 5 6MD89 (CP300) V9.6x (All versions < V11.0), SIPROTEC 5 6MU85 (CP300) (All versions < V11.0), SIPROTEC 5 7KE85 (CP300) (All versions < V11.0), SIPROTEC 5 7SA82 (CP100) (All versions < V8.91), SIPROTEC 5 7SA82 (CP150) (All versions < V11.0), SIPROTEC 5 7SA86 (CP300) (All versions < V11.0), SIPROTEC 5 7SA87 (CP300) (All versions < V11.0), SIPROTEC 5 7SD82 (CP100) (All versions < V8.91), SIPROTEC 5 7SD82 (CP150) (All versions < V11.0), SIPROTEC 5 7SD86 (CP300) (All versions < V11.0), SIPROTEC 5 7SD87 (CP300) (All versions < V11.0), SIPROTEC 5 7SJ81 (CP100) (All versions < V8.91), SIPROTEC 5 7SJ81 (CP150) (All versions < V11.0), SIPROTEC 5 7SJ82 (CP100) (All versions < V8.91), SIPROTEC 5 7SJ82 (CP150) (All versions < V11.0), SIPROTEC 5 7SJ85 (CP300) (All versions < V11.0), SIPROTEC 5 7SJ86 (CP300) (All versions < V11.0), SIPROTEC 5 7SK82 (CP100) (All versions < V8.91), SIPROTEC 5 7SK82 (CP150) (All versions < V11.0), SIPROTEC 5 7SK85 (CP300) (All versions < V11.0), SIPROTEC 5 7SL82 (CP100) (All versions < V8.91), SIPROTEC 5 7SL82 (CP150) (All versions < V11.0), SIPROTEC 5 7SL86 (CP300) (All versions < V11.0), SIPROTEC 5 7SL87 (CP300) (All versions < V11.0), SIPROTEC 5 7SS85 (CP300) (All versions < V11.0), SIPROTEC 5 7ST85 (CP300) (All versions < V11.0), SIPROTEC 5 7ST86 (CP300) (All versions < V11.0), SIPROTEC 5 7SX82 (CP150) (All versions < V11.0), SIPROTEC 5 7SX85 (CP300) (All versions < V11.0), SIPROTEC 5 7SY82 (CP150) (All versions < V11.0), SIPROTEC 5 7UM85 (CP300) (All versions < V11.0), SIPROTEC 5 7UT82 (CP100) (All versions < V8.91), SIPROTEC 5 7UT82 (CP150) (All versions < V11.0), SIPROTEC 5 7UT85 (CP300) (All versions < V11.0), SIPROTEC 5 7UT86 (CP300) (All versions < V11.0), SIPROTEC 5 7UT87 (CP300) (All versions < V11.0), SIPROTEC 5 7VE85 (CP300) (All versions < V11.0), SIPROTEC 5 7VK87 (CP300) (All versions < V11.0), SIPROTEC 5 7VU85 (CP300) (All versions < V11.0), SIPROTEC 5 Compact 7SX800 (CP050) (All versions < V11.0). The affected devices include session identifiers in URL requests for certain functionalities. This could allow an attacker to retrieve sensitive session data from browser history, logs, or other storage mechanisms, potentially leading to unauthorized access.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | SIPROTEC 5 6MD84 (CP300) | < V11.0 | V11.0 |
| Siemens | SIPROTEC 5 6MD85 (CP200) | — | — |
| Siemens | SIPROTEC 5 6MD85 (CP300) | < V11.0 | V11.0 |
| Siemens | SIPROTEC 5 6MD86 (CP200) | — | — |
| Siemens | SIPROTEC 5 6MD86 (CP300) | < V11.0 | V11.0 |
| Siemens | SIPROTEC 5 6MD89 (CP300) | < V11.0 | V11.0 |
| Siemens | SIPROTEC 5 6MD89 (CP300) V9.6x | < V11.0 | V11.0 |
| Siemens | SIPROTEC 5 6MU85 (CP300) | < V11.0 | V11.0 |
| Siemens | SIPROTEC 5 7KE85 (CP200) | — | — |
| Siemens | SIPROTEC 5 7KE85 (CP300) | < V11.0 | V11.0 |
| Siemens | SIPROTEC 5 7SA82 (CP100) | < V8.91 | V8.91 |
| Siemens | SIPROTEC 5 7SA82 (CP150) | < V11.0 | V11.0 |
| Siemens | SIPROTEC 5 7SA84 (CP200) | — | — |
| Siemens | SIPROTEC 5 7SA86 (CP200) | — | — |
| Siemens | SIPROTEC 5 7SA86 (CP300) | < V11.0 | V11.0 |
| Siemens | SIPROTEC 5 7SA87 (CP200) | — | — |
| Siemens | SIPROTEC 5 7SA87 (CP300) | < V11.0 | V11.0 |
| Siemens | SIPROTEC 5 7SD82 (CP100) | < V8.91 | V8.91 |
| Siemens | SIPROTEC 5 7SD82 (CP150) | < V11.0 | V11.0 |
| Siemens | SIPROTEC 5 7SD84 (CP200) | — | — |
| Siemens | SIPROTEC 5 7SD86 (CP200) | — | — |
| Siemens | SIPROTEC 5 7SD86 (CP300) | < V11.0 | V11.0 |
| Siemens | SIPROTEC 5 7SD87 (CP200) | — | — |
| Siemens | SIPROTEC 5 7SD87 (CP300) | < V11.0 | V11.0 |
| Siemens | SIPROTEC 5 7SJ81 (CP100) | < V8.91 | V8.91 |
| Siemens | SIPROTEC 5 7SJ81 (CP150) | < V11.0 | V11.0 |
| Siemens | SIPROTEC 5 7SJ82 (CP100) | < V8.91 | V8.91 |
| Siemens | SIPROTEC 5 7SJ82 (CP150) | < V11.0 | V11.0 |
| Siemens | SIPROTEC 5 7SJ85 (CP200) | — | — |
| Siemens | SIPROTEC 5 7SJ85 (CP300) | < V11.0 | V11.0 |
| Siemens | SIPROTEC 5 7SJ86 (CP200) | — | — |
| Siemens | SIPROTEC 5 7SJ86 (CP300) | < V11.0 | V11.0 |
| Siemens | SIPROTEC 5 7SK82 (CP100) | < V8.91 | V8.91 |
| Siemens | SIPROTEC 5 7SK82 (CP150) | < V11.0 | V11.0 |
| Siemens | SIPROTEC 5 7SK85 (CP200) | — | — |
| Siemens | SIPROTEC 5 7SK85 (CP300) | < V11.0 | V11.0 |
| Siemens | SIPROTEC 5 7SL82 (CP100) | < V8.91 | V8.91 |
| Siemens | SIPROTEC 5 7SL82 (CP150) | < V11.0 | V11.0 |
| Siemens | SIPROTEC 5 7SL86 (CP200) | — | — |
| Siemens | SIPROTEC 5 7SL86 (CP300) | < V11.0 | V11.0 |
| Siemens | SIPROTEC 5 7SL87 (CP200) | — | — |
| Siemens | SIPROTEC 5 7SL87 (CP300) | < V11.0 | V11.0 |
| Siemens | SIPROTEC 5 7SS85 (CP200) | — | — |
| Siemens | SIPROTEC 5 7SS85 (CP300) | < V11.0 | V11.0 |
| Siemens | SIPROTEC 5 7ST85 (CP200) | — | — |
| Siemens | SIPROTEC 5 7ST85 (CP300) | < V11.0 | V11.0 |
| Siemens | SIPROTEC 5 7ST86 (CP300) | < V11.0 | V11.0 |
| Siemens | SIPROTEC 5 7SX82 (CP150) | < V11.0 | V11.0 |
| Siemens | SIPROTEC 5 7SX85 (CP300) | < V11.0 | V11.0 |
| Siemens | SIPROTEC 5 7SY82 (CP150) | < V11.0 | V11.0 |
| Siemens | SIPROTEC 5 7UM85 (CP300) | < V11.0 | V11.0 |
| Siemens | SIPROTEC 5 7UT82 (CP100) | < V8.91 | V8.91 |
| Siemens | SIPROTEC 5 7UT82 (CP150) | < V11.0 | V11.0 |
| Siemens | SIPROTEC 5 7UT85 (CP200) | — | — |
| Siemens | SIPROTEC 5 7UT85 (CP300) | < V11.0 | V11.0 |
| Siemens | SIPROTEC 5 7UT86 (CP200) | — | — |
| Siemens | SIPROTEC 5 7UT86 (CP300) | < V11.0 | V11.0 |
| Siemens | SIPROTEC 5 7UT87 (CP200) | — | — |
| Siemens | SIPROTEC 5 7UT87 (CP300) | < V11.0 | V11.0 |
| Siemens | SIPROTEC 5 7VE85 (CP300) | < V11.0 | V11.0 |
| Siemens | SIPROTEC 5 7VK87 (CP200) | — | — |
| Siemens | SIPROTEC 5 7VK87 (CP300) | < V11.0 | V11.0 |
| Siemens | SIPROTEC 5 7VU85 (CP300) | < V11.0 | V11.0 |
| Siemens | SIPROTEC 5 Compact 7SX800 (CP050) | < V11.0 | V11.0 |
Advisories 4
- SSA-904646 SSA-904646: Sensitive Data Exposure Vulnerability in SIPROTEC 5 Devices Siemens ProductCERT · Nov 10, 2026
- ICSA-25-191-06 Siemens SIPROTEC 5 CISA ICS & IT advisories · May 14, 2026
- NCSC-2025-0211 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Jul 8, 2025
- WID-SEC-2025-1478 Siemens SIPROTEC: Schwachstelle ermöglicht Offenlegung von Informationen BSI CERT-Bund (WID) · Jul 7, 2025