Siemens SIPROTEC 5 Devices
SIPROTEC 5 devices contain a null pointer dereference vulnerability in the web service. This could allow an attacker to send unauthenticated maliciously crafted http request that could cause denial of service condition of the device. Siemens has released new versions for the affected products and recommends to update to the latest versions.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-28766US | — | — | ||
A vulnerability has been identified in SIPROTEC 5 6MD85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 6MD86 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 6MD89 (CP300)… | ||||
references
External citations — patches, advisories, analysis.
- SSA-322980: Denial of Service Vulnerability in SIPROTEC 5 Devices - CSAF Versionself
- SSA-322980: Denial of Service Vulnerability in SIPROTEC 5 Devices - HTML Versionself
- ICS Advisory ICSA-23-103-06 JSONself
- ICS Advisory ICSA-23-103-06 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (88)
- MitigationSIPROTEC 5 6MD85 (CP300)
Block access to port 4443/tcp e.g. with an external firewall
- MitigationSIPROTEC 5 6MD86 (CP300)
Block access to port 4443/tcp e.g. with an external firewall
- MitigationSIPROTEC 5 6MD89 (CP300)
Block access to port 4443/tcp e.g. with an external firewall
- MitigationSIPROTEC 5 6MU85 (CP300)
Block access to port 4443/tcp e.g. with an external firewall
- MitigationSIPROTEC 5 7KE85 (CP300)
Block access to port 4443/tcp e.g. with an external firewall
- MitigationSIPROTEC 5 7SA82 (CP100)
Block access to port 4443/tcp e.g. with an external firewall
- MitigationSIPROTEC 5 7SA82 (CP150)
Block access to port 4443/tcp e.g. with an external firewall
- MitigationSIPROTEC 5 7SA86 (CP300)
Block access to port 4443/tcp e.g. with an external firewall
- MitigationSIPROTEC 5 7SA87 (CP300)
Block access to port 4443/tcp e.g. with an external firewall
- MitigationSIPROTEC 5 7SD82 (CP100)
Block access to port 4443/tcp e.g. with an external firewall
- MitigationSIPROTEC 5 7SD82 (CP150)
Block access to port 4443/tcp e.g. with an external firewall
- MitigationSIPROTEC 5 7SD86 (CP300)
Block access to port 4443/tcp e.g. with an external firewall
- MitigationSIPROTEC 5 7SD87 (CP300)
Block access to port 4443/tcp e.g. with an external firewall
- MitigationSIPROTEC 5 7SJ81 (CP100)
Block access to port 4443/tcp e.g. with an external firewall
- MitigationSIPROTEC 5 7SJ81 (CP150)
Block access to port 4443/tcp e.g. with an external firewall
- MitigationSIPROTEC 5 7SJ82 (CP100)
Block access to port 4443/tcp e.g. with an external firewall
- MitigationSIPROTEC 5 7SJ82 (CP150)
Block access to port 4443/tcp e.g. with an external firewall
- MitigationSIPROTEC 5 7SJ85 (CP300)
Block access to port 4443/tcp e.g. with an external firewall
- MitigationSIPROTEC 5 7SJ86 (CP300)
Block access to port 4443/tcp e.g. with an external firewall
- MitigationSIPROTEC 5 7SK82 (CP100)
Block access to port 4443/tcp e.g. with an external firewall
- MitigationSIPROTEC 5 7SK82 (CP150)
Block access to port 4443/tcp e.g. with an external firewall
- MitigationSIPROTEC 5 7SK85 (CP300)
Block access to port 4443/tcp e.g. with an external firewall
- MitigationSIPROTEC 5 7SL82 (CP100)
Block access to port 4443/tcp e.g. with an external firewall
- MitigationSIPROTEC 5 7SL82 (CP150)
Block access to port 4443/tcp e.g. with an external firewall
- MitigationSIPROTEC 5 7SL86 (CP300)
Block access to port 4443/tcp e.g. with an external firewall
- MitigationSIPROTEC 5 7SL87 (CP300)
Block access to port 4443/tcp e.g. with an external firewall
- MitigationSIPROTEC 5 7SS85 (CP300)
Block access to port 4443/tcp e.g. with an external firewall
- MitigationSIPROTEC 5 7ST85 (CP300)
Block access to port 4443/tcp e.g. with an external firewall
- MitigationSIPROTEC 5 7ST86 (CP300)
Block access to port 4443/tcp e.g. with an external firewall
- MitigationSIPROTEC 5 7SX82 (CP150)
Block access to port 4443/tcp e.g. with an external firewall
- MitigationSIPROTEC 5 7SX85 (CP300)
Block access to port 4443/tcp e.g. with an external firewall
- MitigationSIPROTEC 5 7UM85 (CP300)
Block access to port 4443/tcp e.g. with an external firewall
- MitigationSIPROTEC 5 7UT82 (CP100)
Block access to port 4443/tcp e.g. with an external firewall
- MitigationSIPROTEC 5 7UT82 (CP150)
Block access to port 4443/tcp e.g. with an external firewall
- MitigationSIPROTEC 5 7UT85 (CP300)
Block access to port 4443/tcp e.g. with an external firewall
- MitigationSIPROTEC 5 7UT86 (CP300)
Block access to port 4443/tcp e.g. with an external firewall
- MitigationSIPROTEC 5 7UT87 (CP300)
Block access to port 4443/tcp e.g. with an external firewall
- MitigationSIPROTEC 5 7VE85 (CP300)
Block access to port 4443/tcp e.g. with an external firewall
- MitigationSIPROTEC 5 7VK87 (CP300)
Block access to port 4443/tcp e.g. with an external firewall
- MitigationSIPROTEC 5 7VU85 (CP300)
Block access to port 4443/tcp e.g. with an external firewall
- MitigationSIPROTEC 5 Communication Module ETH-BA-2EL (Rev.1)
Block access to port 4443/tcp e.g. with an external firewall
- MitigationSIPROTEC 5 Communication Module ETH-BB-2FO (Rev. 1)
Block access to port 4443/tcp e.g. with an external firewall
- MitigationSIPROTEC 5 Communication Module ETH-BD-2FO
Block access to port 4443/tcp e.g. with an external firewall
- MitigationSIPROTEC 5 Compact 7SX800 (CP050)
Block access to port 4443/tcp e.g. with an external firewall
- FixedSIPROTEC 5 6MD85 (CP300)
Update to V9.40 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757428/ - FixedSIPROTEC 5 6MD86 (CP300)
Update to V9.40 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757428/ - FixedSIPROTEC 5 6MD89 (CP300)
Update to V9.64 or later version
https://support.industry.siemens.com/cs/ww/en/view/109742950/ - FixedSIPROTEC 5 6MU85 (CP300)
Update to V9.40 or later version
https://support.industry.siemens.com/cs/ww/en/view/109765263/ - FixedSIPROTEC 5 7KE85 (CP300)
Update to V9.40 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757428/ - FixedSIPROTEC 5 7SA82 (CP100)
Update to V8.90 or later V8.xx version
- FixedSIPROTEC 5 7SA82 (CP150)
Update to V9.40 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757433/ - FixedSIPROTEC 5 7SA86 (CP300)
Update to V9.40 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757428/ - FixedSIPROTEC 5 7SA87 (CP300)
Update to V9.40 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757428/ - FixedSIPROTEC 5 7SD82 (CP100)
Update to V8.90 or later V8.xx version
- FixedSIPROTEC 5 7SD82 (CP150)
Update to V9.40 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757433/ - FixedSIPROTEC 5 7SD86 (CP300)
Update to V9.40 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757428/ - FixedSIPROTEC 5 7SD87 (CP300)
Update to V9.40 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757428/ - FixedSIPROTEC 5 7SJ81 (CP100)
Update to V8.89 or later V8.xx version
- FixedSIPROTEC 5 7SJ81 (CP150)
Update to V9.40 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757433/ - FixedSIPROTEC 5 7SJ82 (CP100)
Update to V8.89 or later V8.xx version
- FixedSIPROTEC 5 7SJ82 (CP150)
Update to V9.40 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757433/ - FixedSIPROTEC 5 7SJ85 (CP300)
Update to V9.40 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757428/ - FixedSIPROTEC 5 7SJ86 (CP300)
Update to V9.40 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757428/ - FixedSIPROTEC 5 7SK82 (CP100)
Update to V8.89 or later V8.xx version
- FixedSIPROTEC 5 7SK82 (CP150)
Update to V9.40 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757433/ - FixedSIPROTEC 5 7SK85 (CP300)
Update to V9.40 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757428/ - FixedSIPROTEC 5 7SL82 (CP100)
Update to V8.90 or later V8.xx version
- FixedSIPROTEC 5 7SL82 (CP150)
Update to V9.40 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757433/ - FixedSIPROTEC 5 7SL86 (CP300)
Update to V9.40 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757428/ - FixedSIPROTEC 5 7SL87 (CP300)
Update to V9.40 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757428/ - FixedSIPROTEC 5 7SS85 (CP300)
Update to V9.40 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757428/ - FixedSIPROTEC 5 7ST85 (CP300)
Update to V9.64 or later version
https://support.industry.siemens.com/cs/ww/en/view/109742950/ - FixedSIPROTEC 5 7ST86 (CP300)
Update to V9.40 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757428/ - FixedSIPROTEC 5 7SX82 (CP150)
Update to V9.40 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757433/ - FixedSIPROTEC 5 7SX85 (CP300)
Update to V9.40 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757428/ - FixedSIPROTEC 5 7UM85 (CP300)
Update to V9.40 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757428/ - FixedSIPROTEC 5 7UT82 (CP100)
Update to V8.90 or later V8.xx version
- FixedSIPROTEC 5 7UT82 (CP150)
Update to V9.40 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757433/ - FixedSIPROTEC 5 7UT85 (CP300)
Update to V9.40 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757428/ - FixedSIPROTEC 5 7UT86 (CP300)
Update to V9.40 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757428/ - FixedSIPROTEC 5 7UT87 (CP300)
Update to V9.40 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757428/ - FixedSIPROTEC 5 7VE85 (CP300)
Update to V9.40 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757428/ - FixedSIPROTEC 5 7VK87 (CP300)
Update to V9.40 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757428/ - FixedSIPROTEC 5 7VU85 (CP300)
Update to V9.40 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757428/ - FixedSIPROTEC 5 Communication Module ETH-BA-2EL (Rev.1)
Update to V8.89 or later V8.xx version
- FixedSIPROTEC 5 Communication Module ETH-BB-2FO (Rev. 1)
Update to V8.89 or later V8.xx version
- FixedSIPROTEC 5 Communication Module ETH-BD-2FO
Update to V9.40 or later version
https://support.industry.siemens.com/cs/ww/en/view/109740816/ - FixedSIPROTEC 5 Compact 7SX800 (CP050)
Update to V9.40 or later version
https://support.industry.siemens.com/cs/ww/en/view/109796884/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan