Description
A vulnerability has been identified in blueplanet 100 NX3 M8 (All versions), blueplanet 100 TL3 GEN2 (All versions), blueplanet 105 TL3 (All versions < V3.92), blueplanet 105 TL3 GEN2 (All versions), blueplanet 110 TL3 (All versions < V3.92), blueplanet 125 NX3 M10 (All versions), blueplanet 125 TL3 (All versions < V3.92), blueplanet 125 TL3 GEN2 (All versions), blueplanet 137 TL3 (All versions < V3.92), blueplanet 150 TL3 (All versions < V3.92), blueplanet 150 TL3 GEN2 (All versions), blueplanet 155 TL3 (All versions < V3.92), blueplanet 155 TL3 GEN2 (All versions), blueplanet 165 TL3 (All versions < V3.92), blueplanet 165 TL3 GEN2 (All versions), blueplanet 87.0 TL3 (All versions < V3.92), blueplanet 87.0 TL3 GEN2 (All versions), blueplanet 92.0 TL3 (All versions < V3.92), blueplanet 92.0 TL3 GEN2 (All versions), blueplanet gridsave 110 TL3-S (All versions < V3.92), blueplanet gridsave 137 TL3-S (All versions < V3.92), blueplanet gridsave 92.0 TL3-S (All versions < V3.92). Improper neutralization of special elements used in an sql command ('sql injection') in KACO Meteor server allows an authorized attacker to elevate privileges over a local network.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | blueplanet 100 NX3 M8 | — | — |
| Siemens | blueplanet 100 TL3 GEN2 | — | — |
| Siemens | blueplanet 105 TL3 | < V3.92 | V3.92 |
| Siemens | blueplanet 105 TL3 GEN2 | — | — |
| Siemens | blueplanet 110 TL3 | < V3.92 | V3.92 |
| Siemens | blueplanet 125 NX3 M10 | — | — |
| Siemens | blueplanet 125 TL3 | < V3.92 | V3.92 |
| Siemens | blueplanet 125 TL3 GEN2 | — | — |
| Siemens | blueplanet 137 TL3 | < V3.92 | V3.92 |
| Siemens | blueplanet 150 TL3 | < V3.92 | V3.92 |
| Siemens | blueplanet 150 TL3 GEN2 | — | — |
| Siemens | blueplanet 155 TL3 | < V3.92 | V3.92 |
| Siemens | blueplanet 155 TL3 GEN2 | — | — |
| Siemens | blueplanet 165 TL3 | < V3.92 | V3.92 |
| Siemens | blueplanet 165 TL3 GEN2 | — | — |
| Siemens | blueplanet 25.0 NX3-33.0 NX3 | — | — |
| Siemens | blueplanet 3.0 NX3-20.0 NX3 | — | — |
| Siemens | blueplanet 3.0-5.0 NX1 | — | — |
| Siemens | blueplanet 360 NX3 M6 | — | — |
| Siemens | blueplanet 50.0 NX3-60.0 NX3 | — | — |
| Siemens | blueplanet 87.0 TL3 | < V3.92 | V3.92 |
| Siemens | blueplanet 87.0 TL3 GEN2 | — | — |
| Siemens | blueplanet 92.0 TL3 | < V3.92 | V3.92 |
| Siemens | blueplanet 92.0 TL3 GEN2 | — | — |
| Siemens | blueplanet gridsave 110 TL3-S | < V3.92 | V3.92 |
| Siemens | blueplanet gridsave 137 TL3-S | < V3.92 | V3.92 |
| Siemens | blueplanet gridsave 92.0 TL3-S | < V3.92 | V3.92 |
| Siemens | blueplanet hybrid 10.0 TL3 | — | — |
| Siemens | blueplanet hybrid 6.0 NH3-12.0 NH3 | — | — |
Advisories 3
- SSA-545643 SSA-545643: Multiple Vulnerabilities in KACO Blueplanet Inverters Siemens ProductCERT · Oct 13, 2026
- ICSA-26-160-02 Siemens KACO Blueplanet Inverters CISA ICS & IT advisories · Jun 9, 2026
- NCSC-2026-0147 Kwetsbaarheden verholpen in Siemens-producten NCSC-NL (Netherlands) · May 13, 2026