ICSA-25-016-04

Siemens SIPROTEC 5 Products

view advisory published 2025-01-14

Affected SIPROTEC 5 devices do not properly limit the access of the web server to the filesystem. This could allow an authenticated remote attacker to read arbitrary files or the entire filesystem of the device. Siemens has released new versions for the affected products and recommends to update to the latest versions.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2024-53649US	—	0.62% (49th)	—	2025-01-14
A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V9.80), SIPROTEC 5 6MD85 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 6MD86 (CP300) (All vers…

references

External citations — patches, advisories, analysis.

remediations (86)

MitigationSIPROTEC 5 6MD84 (CP300)
Disable the web server of the affected system
MitigationSIPROTEC 5 6MD85 (CP300)
Disable the web server of the affected system
MitigationSIPROTEC 5 6MD86 (CP300)
Disable the web server of the affected system
MitigationSIPROTEC 5 6MD89 (CP300)
Disable the web server of the affected system
MitigationSIPROTEC 5 6MU85 (CP300)
Disable the web server of the affected system
MitigationSIPROTEC 5 7KE85 (CP300)
Disable the web server of the affected system
MitigationSIPROTEC 5 7SA82 (CP100)
Disable the web server of the affected system
MitigationSIPROTEC 5 7SA82 (CP150)
Disable the web server of the affected system
MitigationSIPROTEC 5 7SA86 (CP300)
Disable the web server of the affected system
MitigationSIPROTEC 5 7SA87 (CP300)
Disable the web server of the affected system
MitigationSIPROTEC 5 7SD82 (CP100)
Disable the web server of the affected system
MitigationSIPROTEC 5 7SD82 (CP150)
Disable the web server of the affected system
MitigationSIPROTEC 5 7SD86 (CP300)
Disable the web server of the affected system
MitigationSIPROTEC 5 7SD87 (CP300)
Disable the web server of the affected system
MitigationSIPROTEC 5 7SJ81 (CP100)
Disable the web server of the affected system
MitigationSIPROTEC 5 7SJ81 (CP150)
Disable the web server of the affected system
MitigationSIPROTEC 5 7SJ82 (CP100)
Disable the web server of the affected system
MitigationSIPROTEC 5 7SJ82 (CP150)
Disable the web server of the affected system
MitigationSIPROTEC 5 7SJ85 (CP300)
Disable the web server of the affected system
MitigationSIPROTEC 5 7SJ86 (CP300)
Disable the web server of the affected system
MitigationSIPROTEC 5 7SK82 (CP100)
Disable the web server of the affected system
MitigationSIPROTEC 5 7SK82 (CP150)
Disable the web server of the affected system
MitigationSIPROTEC 5 7SK85 (CP300)
Disable the web server of the affected system
MitigationSIPROTEC 5 7SL82 (CP100)
Disable the web server of the affected system
MitigationSIPROTEC 5 7SL82 (CP150)
Disable the web server of the affected system
MitigationSIPROTEC 5 7SL86 (CP300)
Disable the web server of the affected system
MitigationSIPROTEC 5 7SL87 (CP300)
Disable the web server of the affected system
MitigationSIPROTEC 5 7SS85 (CP300)
Disable the web server of the affected system
MitigationSIPROTEC 5 7ST85 (CP300)
Disable the web server of the affected system
MitigationSIPROTEC 5 7ST86 (CP300)
Disable the web server of the affected system
MitigationSIPROTEC 5 7SX82 (CP150)
Disable the web server of the affected system
MitigationSIPROTEC 5 7SX85 (CP300)
Disable the web server of the affected system
MitigationSIPROTEC 5 7SY82 (CP150)
Disable the web server of the affected system
MitigationSIPROTEC 5 7UM85 (CP300)
Disable the web server of the affected system
MitigationSIPROTEC 5 7UT82 (CP100)
Disable the web server of the affected system
MitigationSIPROTEC 5 7UT82 (CP150)
Disable the web server of the affected system
MitigationSIPROTEC 5 7UT85 (CP300)
Disable the web server of the affected system
MitigationSIPROTEC 5 7UT86 (CP300)
Disable the web server of the affected system
MitigationSIPROTEC 5 7UT87 (CP300)
Disable the web server of the affected system
MitigationSIPROTEC 5 7VE85 (CP300)
Disable the web server of the affected system
MitigationSIPROTEC 5 7VK87 (CP300)
Disable the web server of the affected system
MitigationSIPROTEC 5 7VU85 (CP300)
Disable the web server of the affected system
MitigationSIPROTEC 5 Compact 7SX800 (CP050)
Disable the web server of the affected system
FixedSIPROTEC 5 6MD84 (CP300)
Update to V9.80 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/
FixedSIPROTEC 5 6MD85 (CP300)
Update to V9.80 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757428/
FixedSIPROTEC 5 6MD86 (CP300)
Update to V9.80 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757428/
FixedSIPROTEC 5 6MD89 (CP300)
Update to V9.68 or later version
https://support.industry.siemens.com/cs/ww/en/view/109742950/
FixedSIPROTEC 5 6MU85 (CP300)
Update to V9.80 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757428/
FixedSIPROTEC 5 7KE85 (CP300)
Update to V9.80 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757428/
FixedSIPROTEC 5 7SA82 (CP100)
Update to V8.90 or later V8.xx version
FixedSIPROTEC 5 7SA82 (CP150)
Update to V9.80 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/
FixedSIPROTEC 5 7SA86 (CP300)
Update to V9.80 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757428/
FixedSIPROTEC 5 7SA87 (CP300)
Update to V9.80 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757428/
FixedSIPROTEC 5 7SD82 (CP100)
Update to V8.90 or later V8.xx version
FixedSIPROTEC 5 7SD82 (CP150)
Update to V9.80 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/
FixedSIPROTEC 5 7SD86 (CP300)
Update to V9.80 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757428/
FixedSIPROTEC 5 7SD87 (CP300)
Update to V9.80 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757428/
FixedSIPROTEC 5 7SJ81 (CP100)
Update to V8.90 or later V8.xx version
FixedSIPROTEC 5 7SJ81 (CP150)
Update to V9.80 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/
FixedSIPROTEC 5 7SJ82 (CP100)
Update to V8.90 or later V8.xx version
FixedSIPROTEC 5 7SJ82 (CP150)
Update to V9.80 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/
FixedSIPROTEC 5 7SJ85 (CP300)
Update to V9.80 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757428/
FixedSIPROTEC 5 7SJ86 (CP300)
Update to V9.80 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757428/
FixedSIPROTEC 5 7SK82 (CP100)
Update to V8.90 or later V8.xx version
FixedSIPROTEC 5 7SK82 (CP150)
Update to V9.80 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/
FixedSIPROTEC 5 7SK85 (CP300)
Update to V9.80 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757428/
FixedSIPROTEC 5 7SL82 (CP100)
Update to V8.90 or later V8.xx version
FixedSIPROTEC 5 7SL82 (CP150)
Update to V9.80 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/
FixedSIPROTEC 5 7SL86 (CP300)
Update to V9.80 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757428/
FixedSIPROTEC 5 7SL87 (CP300)
Update to V9.80 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757428/
FixedSIPROTEC 5 7SS85 (CP300)
Update to V9.80 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757428/
FixedSIPROTEC 5 7ST85 (CP300)
Update to V9.68 or later version
https://support.industry.siemens.com/cs/ww/en/view/109742950/
FixedSIPROTEC 5 7ST86 (CP300)
Update to V9.80 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/
FixedSIPROTEC 5 7SX82 (CP150)
Update to V9.80 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/
FixedSIPROTEC 5 7SX85 (CP300)
Update to V9.80 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757428/
FixedSIPROTEC 5 7SY82 (CP150)
Update to V9.80 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/
FixedSIPROTEC 5 7UM85 (CP300)
Update to V9.80 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757428/
FixedSIPROTEC 5 7UT82 (CP100)
Update to V8.90 or later V8.xx version
FixedSIPROTEC 5 7UT82 (CP150)
Update to V9.80 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/
FixedSIPROTEC 5 7UT85 (CP300)
Update to V9.80 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757428/
FixedSIPROTEC 5 7UT86 (CP300)
Update to V9.80 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757428/
FixedSIPROTEC 5 7UT87 (CP300)
Update to V9.80 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757428/
FixedSIPROTEC 5 7VE85 (CP300)
Update to V9.80 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757428/
FixedSIPROTEC 5 7VK87 (CP300)
Update to V9.80 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757428/
FixedSIPROTEC 5 7VU85 (CP300)
Update to V9.80 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/
FixedSIPROTEC 5 Compact 7SX800 (CP050)
Update to V9.80 or later version
https://support.industry.siemens.com/cs/ww/en/view/109796884/

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan