ICSA-24-193-14

icsaUScisa_csaf_ot

Siemens SIPROTEC

view advisory published 2024-07-09

The SIPROTEC 5 devices are supporting weak encryption. This could allow an unauthorized attacker in a man-in-the-middle position to read any data passed over the connection between legitimate clients and the affected device. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2024-38867US——
A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V9.64), SIPROTEC 5 6MD85 (CP200) (All versions), SIPROTEC 5 6MD85 (CP300) (All versions < V9.64), SI…
02

references

External citations — patches, advisories, analysis.

03

remediations (132)

  • No fix plannedSIPROTEC 5 6MD85 (CP200)

    Currently no fix is planned

  • No fix plannedSIPROTEC 5 6MD86 (CP200)

    Currently no fix is planned

  • No fix plannedSIPROTEC 5 7KE85 (CP200)

    Currently no fix is planned

  • No fix plannedSIPROTEC 5 7SA84 (CP200)

    Currently no fix is planned

  • No fix plannedSIPROTEC 5 7SA86 (CP200)

    Currently no fix is planned

  • No fix plannedSIPROTEC 5 7SA87 (CP200)

    Currently no fix is planned

  • No fix plannedSIPROTEC 5 7SD84 (CP200)

    Currently no fix is planned

  • No fix plannedSIPROTEC 5 7SD86 (CP200)

    Currently no fix is planned

  • No fix plannedSIPROTEC 5 7SD87 (CP200)

    Currently no fix is planned

  • No fix plannedSIPROTEC 5 7SJ85 (CP200)

    Currently no fix is planned

  • No fix plannedSIPROTEC 5 7SJ86 (CP200)

    Currently no fix is planned

  • No fix plannedSIPROTEC 5 7SK85 (CP200)

    Currently no fix is planned

  • No fix plannedSIPROTEC 5 7SL86 (CP200)

    Currently no fix is planned

  • No fix plannedSIPROTEC 5 7SL87 (CP200)

    Currently no fix is planned

  • No fix plannedSIPROTEC 5 7SS85 (CP200)

    Currently no fix is planned

  • No fix plannedSIPROTEC 5 7ST85 (CP200)

    Currently no fix is planned

  • No fix plannedSIPROTEC 5 7UT85 (CP200)

    Currently no fix is planned

  • No fix plannedSIPROTEC 5 7UT86 (CP200)

    Currently no fix is planned

  • No fix plannedSIPROTEC 5 7UT87 (CP200)

    Currently no fix is planned

  • No fix plannedSIPROTEC 5 7VK87 (CP200)

    Currently no fix is planned

  • No fix plannedSIPROTEC 5 Communication Module ETH-BA-2EL (Rev.1)

    Currently no fix is planned

  • No fix plannedSIPROTEC 5 Communication Module ETH-BB-2FO (Rev. 1)

    Currently no fix is planned

  • FixedSIPROTEC 5 6MD84 (CP300)

    Update to V9.64 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • FixedSIPROTEC 5 6MD85 (CP300)

    Update to V9.64 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • FixedSIPROTEC 5 6MD86 (CP300)

    Update to V9.64 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • FixedSIPROTEC 5 6MD89 (CP300)

    Update to V9.64 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • FixedSIPROTEC 5 6MU85 (CP300)

    Update to V9.64 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • FixedSIPROTEC 5 7KE85 (CP300)

    Update to V9.64 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • FixedSIPROTEC 5 7SA82 (CP100)

    Update to V8.90 or later V8.xx version

  • FixedSIPROTEC 5 7SA82 (CP150)

    Update to V9.65 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109757433/
  • FixedSIPROTEC 5 7SA86 (CP300)

    Update to V9.65 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109757433/
  • FixedSIPROTEC 5 7SA87 (CP300)

    Update to V9.65 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109757433/
  • FixedSIPROTEC 5 7SD82 (CP100)

    Update to V8.90 or later V8.xx version

  • FixedSIPROTEC 5 7SD82 (CP150)

    Update to V9.65 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109757433/
  • FixedSIPROTEC 5 7SD86 (CP300)

    Update to V9.65 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109757433/
  • FixedSIPROTEC 5 7SD87 (CP300)

    Update to V9.65 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109757433/
  • FixedSIPROTEC 5 7SJ81 (CP100)

    Update to V8.89 or later V8.xx version

  • FixedSIPROTEC 5 7SJ81 (CP150)

    Update to V9.65 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109757433/
  • FixedSIPROTEC 5 7SJ82 (CP100)

    Update to V8.89 or later V8.xx version

  • FixedSIPROTEC 5 7SJ82 (CP150)

    Update to V9.65 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109757433/
  • FixedSIPROTEC 5 7SJ85 (CP300)

    Update to V9.65 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109757433/
  • FixedSIPROTEC 5 7SJ86 (CP300)

    Update to V9.65 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109757433/
  • FixedSIPROTEC 5 7SK82 (CP100)

    Update to V8.89 or later V8.xx version

  • FixedSIPROTEC 5 7SK82 (CP150)

    Update to V9.65 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109757433/
  • FixedSIPROTEC 5 7SK85 (CP300)

    Update to V9.65 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109757433/
  • FixedSIPROTEC 5 7SL82 (CP100)

    Update to V8.90 or later V8.xx version

  • FixedSIPROTEC 5 7SL82 (CP150)

    Update to V9.65 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109757433/
  • FixedSIPROTEC 5 7SL86 (CP300)

    Update to V9.65 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109757433/
  • FixedSIPROTEC 5 7SL87 (CP300)

    Update to V9.65 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109757433/
  • FixedSIPROTEC 5 7SS85 (CP300)

    Update to V9.64 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • FixedSIPROTEC 5 7ST85 (CP300)

    Update to V9.64 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • FixedSIPROTEC 5 7ST86 (CP300)

    Update to V9.64 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • FixedSIPROTEC 5 7SX82 (CP150)

    Update to V9.65 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109757433/
  • FixedSIPROTEC 5 7SX85 (CP300)

    Update to V9.65 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109757433/
  • FixedSIPROTEC 5 7UM85 (CP300)

    Update to V9.64 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • FixedSIPROTEC 5 7UT82 (CP100)

    Update to V8.90 or later V8.xx version

  • FixedSIPROTEC 5 7UT82 (CP150)

    Update to V9.65 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109757433/
  • FixedSIPROTEC 5 7UT85 (CP300)

    Update to V9.65 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109757433/
  • FixedSIPROTEC 5 7UT86 (CP300)

    Update to V9.65 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109757433/
  • FixedSIPROTEC 5 7UT87 (CP300)

    Update to V9.65 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109757433/
  • FixedSIPROTEC 5 7VE85 (CP300)

    Update to V9.64 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • FixedSIPROTEC 5 7VK87 (CP300)

    Update to V9.65 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109757433/
  • FixedSIPROTEC 5 7VU85 (CP300)

    Update to V9.64 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • FixedSIPROTEC 5 Communication Module ETH-BA-2EL (Rev.1)

    Update to V8.89 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109740816/
  • FixedSIPROTEC 5 Communication Module ETH-BB-2FO (Rev. 1)

    Update to V8.89 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109740816/
  • FixedSIPROTEC 5 Communication Module ETH-BD-2FO

    Update to V9.62 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109740816/
  • FixedSIPROTEC 5 Compact 7SX800 (CP050)

    Update to V9.64 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109796884/
  • WorkaroundSIPROTEC 5 6MD84 (CP300)

    Restrict access to port 443/tcp for web, 4443/tcp for DIGSI 5 and configurable port for syslog over TLS to trusted IP addresses only

  • WorkaroundSIPROTEC 5 6MD85 (CP200)

    Restrict access to port 443/tcp for web, 4443/tcp for DIGSI 5 and configurable port for syslog over TLS to trusted IP addresses only

  • WorkaroundSIPROTEC 5 6MD85 (CP300)

    Restrict access to port 443/tcp for web, 4443/tcp for DIGSI 5 and configurable port for syslog over TLS to trusted IP addresses only

  • WorkaroundSIPROTEC 5 6MD86 (CP200)

    Restrict access to port 443/tcp for web, 4443/tcp for DIGSI 5 and configurable port for syslog over TLS to trusted IP addresses only

  • WorkaroundSIPROTEC 5 6MD86 (CP300)

    Restrict access to port 443/tcp for web, 4443/tcp for DIGSI 5 and configurable port for syslog over TLS to trusted IP addresses only

  • WorkaroundSIPROTEC 5 6MD89 (CP300)

    Restrict access to port 443/tcp for web, 4443/tcp for DIGSI 5 and configurable port for syslog over TLS to trusted IP addresses only

  • WorkaroundSIPROTEC 5 6MU85 (CP300)

    Restrict access to port 443/tcp for web, 4443/tcp for DIGSI 5 and configurable port for syslog over TLS to trusted IP addresses only

  • WorkaroundSIPROTEC 5 7KE85 (CP200)

    Restrict access to port 443/tcp for web, 4443/tcp for DIGSI 5 and configurable port for syslog over TLS to trusted IP addresses only

  • WorkaroundSIPROTEC 5 7KE85 (CP300)

    Restrict access to port 443/tcp for web, 4443/tcp for DIGSI 5 and configurable port for syslog over TLS to trusted IP addresses only

  • WorkaroundSIPROTEC 5 7SA82 (CP100)

    Restrict access to port 443/tcp for web, 4443/tcp for DIGSI 5 and configurable port for syslog over TLS to trusted IP addresses only

  • WorkaroundSIPROTEC 5 7SA82 (CP150)

    Restrict access to port 443/tcp for web, 4443/tcp for DIGSI 5 and configurable port for syslog over TLS to trusted IP addresses only

  • WorkaroundSIPROTEC 5 7SA84 (CP200)

    Restrict access to port 443/tcp for web, 4443/tcp for DIGSI 5 and configurable port for syslog over TLS to trusted IP addresses only

  • WorkaroundSIPROTEC 5 7SA86 (CP200)

    Restrict access to port 443/tcp for web, 4443/tcp for DIGSI 5 and configurable port for syslog over TLS to trusted IP addresses only

  • WorkaroundSIPROTEC 5 7SA86 (CP300)

    Restrict access to port 443/tcp for web, 4443/tcp for DIGSI 5 and configurable port for syslog over TLS to trusted IP addresses only

  • WorkaroundSIPROTEC 5 7SA87 (CP200)

    Restrict access to port 443/tcp for web, 4443/tcp for DIGSI 5 and configurable port for syslog over TLS to trusted IP addresses only

  • WorkaroundSIPROTEC 5 7SA87 (CP300)

    Restrict access to port 443/tcp for web, 4443/tcp for DIGSI 5 and configurable port for syslog over TLS to trusted IP addresses only

  • WorkaroundSIPROTEC 5 7SD82 (CP100)

    Restrict access to port 443/tcp for web, 4443/tcp for DIGSI 5 and configurable port for syslog over TLS to trusted IP addresses only

  • WorkaroundSIPROTEC 5 7SD82 (CP150)

    Restrict access to port 443/tcp for web, 4443/tcp for DIGSI 5 and configurable port for syslog over TLS to trusted IP addresses only

  • WorkaroundSIPROTEC 5 7SD84 (CP200)

    Restrict access to port 443/tcp for web, 4443/tcp for DIGSI 5 and configurable port for syslog over TLS to trusted IP addresses only

  • WorkaroundSIPROTEC 5 7SD86 (CP200)

    Restrict access to port 443/tcp for web, 4443/tcp for DIGSI 5 and configurable port for syslog over TLS to trusted IP addresses only

  • WorkaroundSIPROTEC 5 7SD86 (CP300)

    Restrict access to port 443/tcp for web, 4443/tcp for DIGSI 5 and configurable port for syslog over TLS to trusted IP addresses only

  • WorkaroundSIPROTEC 5 7SD87 (CP200)

    Restrict access to port 443/tcp for web, 4443/tcp for DIGSI 5 and configurable port for syslog over TLS to trusted IP addresses only

  • WorkaroundSIPROTEC 5 7SD87 (CP300)

    Restrict access to port 443/tcp for web, 4443/tcp for DIGSI 5 and configurable port for syslog over TLS to trusted IP addresses only

  • WorkaroundSIPROTEC 5 7SJ81 (CP100)

    Restrict access to port 443/tcp for web, 4443/tcp for DIGSI 5 and configurable port for syslog over TLS to trusted IP addresses only

  • WorkaroundSIPROTEC 5 7SJ81 (CP150)

    Restrict access to port 443/tcp for web, 4443/tcp for DIGSI 5 and configurable port for syslog over TLS to trusted IP addresses only

  • WorkaroundSIPROTEC 5 7SJ82 (CP100)

    Restrict access to port 443/tcp for web, 4443/tcp for DIGSI 5 and configurable port for syslog over TLS to trusted IP addresses only

  • WorkaroundSIPROTEC 5 7SJ82 (CP150)

    Restrict access to port 443/tcp for web, 4443/tcp for DIGSI 5 and configurable port for syslog over TLS to trusted IP addresses only

  • WorkaroundSIPROTEC 5 7SJ85 (CP200)

    Restrict access to port 443/tcp for web, 4443/tcp for DIGSI 5 and configurable port for syslog over TLS to trusted IP addresses only

  • WorkaroundSIPROTEC 5 7SJ85 (CP300)

    Restrict access to port 443/tcp for web, 4443/tcp for DIGSI 5 and configurable port for syslog over TLS to trusted IP addresses only

  • WorkaroundSIPROTEC 5 7SJ86 (CP200)

    Restrict access to port 443/tcp for web, 4443/tcp for DIGSI 5 and configurable port for syslog over TLS to trusted IP addresses only

  • WorkaroundSIPROTEC 5 7SJ86 (CP300)

    Restrict access to port 443/tcp for web, 4443/tcp for DIGSI 5 and configurable port for syslog over TLS to trusted IP addresses only

  • WorkaroundSIPROTEC 5 7SK82 (CP100)

    Restrict access to port 443/tcp for web, 4443/tcp for DIGSI 5 and configurable port for syslog over TLS to trusted IP addresses only

  • WorkaroundSIPROTEC 5 7SK82 (CP150)

    Restrict access to port 443/tcp for web, 4443/tcp for DIGSI 5 and configurable port for syslog over TLS to trusted IP addresses only

  • WorkaroundSIPROTEC 5 7SK85 (CP200)

    Restrict access to port 443/tcp for web, 4443/tcp for DIGSI 5 and configurable port for syslog over TLS to trusted IP addresses only

  • WorkaroundSIPROTEC 5 7SK85 (CP300)

    Restrict access to port 443/tcp for web, 4443/tcp for DIGSI 5 and configurable port for syslog over TLS to trusted IP addresses only

  • WorkaroundSIPROTEC 5 7SL82 (CP100)

    Restrict access to port 443/tcp for web, 4443/tcp for DIGSI 5 and configurable port for syslog over TLS to trusted IP addresses only

  • WorkaroundSIPROTEC 5 7SL82 (CP150)

    Restrict access to port 443/tcp for web, 4443/tcp for DIGSI 5 and configurable port for syslog over TLS to trusted IP addresses only

  • WorkaroundSIPROTEC 5 7SL86 (CP200)

    Restrict access to port 443/tcp for web, 4443/tcp for DIGSI 5 and configurable port for syslog over TLS to trusted IP addresses only

  • WorkaroundSIPROTEC 5 7SL86 (CP300)

    Restrict access to port 443/tcp for web, 4443/tcp for DIGSI 5 and configurable port for syslog over TLS to trusted IP addresses only

  • WorkaroundSIPROTEC 5 7SL87 (CP200)

    Restrict access to port 443/tcp for web, 4443/tcp for DIGSI 5 and configurable port for syslog over TLS to trusted IP addresses only

  • WorkaroundSIPROTEC 5 7SL87 (CP300)

    Restrict access to port 443/tcp for web, 4443/tcp for DIGSI 5 and configurable port for syslog over TLS to trusted IP addresses only

  • WorkaroundSIPROTEC 5 7SS85 (CP200)

    Restrict access to port 443/tcp for web, 4443/tcp for DIGSI 5 and configurable port for syslog over TLS to trusted IP addresses only

  • WorkaroundSIPROTEC 5 7SS85 (CP300)

    Restrict access to port 443/tcp for web, 4443/tcp for DIGSI 5 and configurable port for syslog over TLS to trusted IP addresses only

  • WorkaroundSIPROTEC 5 7ST85 (CP200)

    Restrict access to port 443/tcp for web, 4443/tcp for DIGSI 5 and configurable port for syslog over TLS to trusted IP addresses only

  • WorkaroundSIPROTEC 5 7ST85 (CP300)

    Restrict access to port 443/tcp for web, 4443/tcp for DIGSI 5 and configurable port for syslog over TLS to trusted IP addresses only

  • WorkaroundSIPROTEC 5 7ST86 (CP300)

    Restrict access to port 443/tcp for web, 4443/tcp for DIGSI 5 and configurable port for syslog over TLS to trusted IP addresses only

  • WorkaroundSIPROTEC 5 7SX82 (CP150)

    Restrict access to port 443/tcp for web, 4443/tcp for DIGSI 5 and configurable port for syslog over TLS to trusted IP addresses only

  • WorkaroundSIPROTEC 5 7SX85 (CP300)

    Restrict access to port 443/tcp for web, 4443/tcp for DIGSI 5 and configurable port for syslog over TLS to trusted IP addresses only

  • WorkaroundSIPROTEC 5 7UM85 (CP300)

    Restrict access to port 443/tcp for web, 4443/tcp for DIGSI 5 and configurable port for syslog over TLS to trusted IP addresses only

  • WorkaroundSIPROTEC 5 7UT82 (CP100)

    Restrict access to port 443/tcp for web, 4443/tcp for DIGSI 5 and configurable port for syslog over TLS to trusted IP addresses only

  • WorkaroundSIPROTEC 5 7UT82 (CP150)

    Restrict access to port 443/tcp for web, 4443/tcp for DIGSI 5 and configurable port for syslog over TLS to trusted IP addresses only

  • WorkaroundSIPROTEC 5 7UT85 (CP200)

    Restrict access to port 443/tcp for web, 4443/tcp for DIGSI 5 and configurable port for syslog over TLS to trusted IP addresses only

  • WorkaroundSIPROTEC 5 7UT85 (CP300)

    Restrict access to port 443/tcp for web, 4443/tcp for DIGSI 5 and configurable port for syslog over TLS to trusted IP addresses only

  • WorkaroundSIPROTEC 5 7UT86 (CP200)

    Restrict access to port 443/tcp for web, 4443/tcp for DIGSI 5 and configurable port for syslog over TLS to trusted IP addresses only

  • WorkaroundSIPROTEC 5 7UT86 (CP300)

    Restrict access to port 443/tcp for web, 4443/tcp for DIGSI 5 and configurable port for syslog over TLS to trusted IP addresses only

  • WorkaroundSIPROTEC 5 7UT87 (CP200)

    Restrict access to port 443/tcp for web, 4443/tcp for DIGSI 5 and configurable port for syslog over TLS to trusted IP addresses only

  • WorkaroundSIPROTEC 5 7UT87 (CP300)

    Restrict access to port 443/tcp for web, 4443/tcp for DIGSI 5 and configurable port for syslog over TLS to trusted IP addresses only

  • WorkaroundSIPROTEC 5 7VE85 (CP300)

    Restrict access to port 443/tcp for web, 4443/tcp for DIGSI 5 and configurable port for syslog over TLS to trusted IP addresses only

  • WorkaroundSIPROTEC 5 7VK87 (CP200)

    Restrict access to port 443/tcp for web, 4443/tcp for DIGSI 5 and configurable port for syslog over TLS to trusted IP addresses only

  • WorkaroundSIPROTEC 5 7VK87 (CP300)

    Restrict access to port 443/tcp for web, 4443/tcp for DIGSI 5 and configurable port for syslog over TLS to trusted IP addresses only

  • WorkaroundSIPROTEC 5 7VU85 (CP300)

    Restrict access to port 443/tcp for web, 4443/tcp for DIGSI 5 and configurable port for syslog over TLS to trusted IP addresses only

  • WorkaroundSIPROTEC 5 Communication Module ETH-BA-2EL (Rev.1)

    Restrict access to port 443/tcp for web, 4443/tcp for DIGSI 5 and configurable port for syslog over TLS to trusted IP addresses only

  • WorkaroundSIPROTEC 5 Communication Module ETH-BB-2FO (Rev. 1)

    Restrict access to port 443/tcp for web, 4443/tcp for DIGSI 5 and configurable port for syslog over TLS to trusted IP addresses only

  • WorkaroundSIPROTEC 5 Communication Module ETH-BD-2FO

    Restrict access to port 443/tcp for web, 4443/tcp for DIGSI 5 and configurable port for syslog over TLS to trusted IP addresses only

  • WorkaroundSIPROTEC 5 Compact 7SX800 (CP050)

    Restrict access to port 443/tcp for web, 4443/tcp for DIGSI 5 and configurable port for syslog over TLS to trusted IP addresses only

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan