Description
A vulnerability has been identified in blueplanet 100 NX3 M8 (All versions), blueplanet 100 TL3 GEN2 (All versions < V6.1.4.9), blueplanet 105 TL3 (All versions < V3.92), blueplanet 105 TL3 GEN2 (All versions < V6.1.4.9), blueplanet 110 TL3 (All versions < V3.92), blueplanet 125 NX3 M10 (All versions), blueplanet 125 TL3 (All versions < V3.92), blueplanet 125 TL3 GEN2 (All versions < V6.1.4.9), blueplanet 137 TL3 (All versions < V3.92), blueplanet 150 TL3 (All versions < V3.92), blueplanet 150 TL3 GEN2 (All versions < V6.1.4.9), blueplanet 155 TL3 (All versions < V3.92), blueplanet 155 TL3 GEN2 (All versions < V6.1.4.9), blueplanet 165 TL3 (All versions < V3.92), blueplanet 165 TL3 GEN2 (All versions < V6.1.4.9), blueplanet 3.0 TL3-60.0 TL3 (All versions), blueplanet 87.0 TL3 (All versions < V3.92), blueplanet 87.0 TL3 GEN2 (All versions < V6.1.4.9), blueplanet 92.0 TL3 (All versions < V3.92), blueplanet 92.0 TL3 GEN2 (All versions < V6.1.4.9), blueplanet gridsave 110 TL3-S (All versions < V3.91), blueplanet gridsave 137 TL3-S (All versions < V3.91), blueplanet gridsave 92.0 TL3-S (All versions < V3.91). A CRC16-based algorithm for generating Technical Service credentials could allow an attacker to derive the credentials from the devices serial number and misuse them to gain unauthorized access.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | blueplanet 100 NX3 M8 | — | — |
| Siemens | blueplanet 100 TL3 GEN2 | < V6.1.4.9 | V6.1.4.9 |
| Siemens | blueplanet 105 TL3 | < V3.92 | V3.92 |
| Siemens | blueplanet 105 TL3 GEN2 | < V6.1.4.9 | V6.1.4.9 |
| Siemens | blueplanet 110 TL3 | < V3.92 | V3.92 |
| Siemens | blueplanet 125 NX3 M10 | — | — |
| Siemens | blueplanet 125 TL3 | < V3.92 | V3.92 |
| Siemens | blueplanet 125 TL3 GEN2 | < V6.1.4.9 | V6.1.4.9 |
| Siemens | blueplanet 137 TL3 | < V3.92 | V3.92 |
| Siemens | blueplanet 150 TL3 | < V3.92 | V3.92 |
| Siemens | blueplanet 150 TL3 GEN2 | < V6.1.4.9 | V6.1.4.9 |
| Siemens | blueplanet 155 TL3 | < V3.92 | V3.92 |
| Siemens | blueplanet 155 TL3 GEN2 | < V6.1.4.9 | V6.1.4.9 |
| Siemens | blueplanet 165 TL3 | < V3.92 | V3.92 |
| Siemens | blueplanet 165 TL3 GEN2 | < V6.1.4.9 | V6.1.4.9 |
| Siemens | blueplanet 25.0 NX3-33.0 NX3 | — | — |
| Siemens | blueplanet 3.0 NX3-20.0 NX3 | — | — |
| Siemens | blueplanet 3.0 TL3-60.0 TL3 | — | — |
| Siemens | blueplanet 3.0-5.0 NX1 | — | — |
| Siemens | blueplanet 360 NX3 M6 | — | — |
| Siemens | blueplanet 50.0 NX3-60.0 NX3 | — | — |
| Siemens | blueplanet 87.0 TL3 | < V3.92 | V3.92 |
| Siemens | blueplanet 87.0 TL3 GEN2 | < V6.1.4.9 | V6.1.4.9 |
| Siemens | blueplanet 92.0 TL3 | < V3.92 | V3.92 |
| Siemens | blueplanet 92.0 TL3 GEN2 | < V6.1.4.9 | V6.1.4.9 |
| Siemens | blueplanet gridsave 110 TL3-S | < V3.91 | V3.91 |
| Siemens | blueplanet gridsave 137 TL3-S | < V3.91 | V3.91 |
| Siemens | blueplanet gridsave 92.0 TL3-S | < V3.91 | V3.91 |
| Siemens | blueplanet hybrid 10.0 TL3 | — | — |
| Siemens | blueplanet hybrid 6.0 NH3-12.0 NH3 | — | — |
Advisories 3
- SSA-545643 SSA-545643: Multiple Vulnerabilities in KACO Blueplanet Inverters Siemens ProductCERT · Oct 13, 2026
- ICSA-26-160-02 Siemens KACO Blueplanet Inverters CISA ICS & IT advisories · Jun 9, 2026
- NCSC-2026-0147 Kwetsbaarheden verholpen in Siemens-producten NCSC-NL (Netherlands) · May 13, 2026