ICSA-26-160-02

icsaUScisa_csaf_ot

Siemens KACO Blueplanet Inverters

view advisory published 2026-05-12

KACO blueplanet Inverters contain multiple vulnerabilities that could allow an attacker to derive the credentials from the devices serial number and misuse them to gain unauthorized access. KACO new energy GmbH has released new versions for several affected products and recommends to update to the latest versions. KACO new energy GmbH is preparing further fix versions and recommends countermeasures for products where fixes are not, or not yet available.

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2026-41125US——
A vulnerability has been identified in blueplanet 100 NX3 M8 (All versions), blueplanet 100 TL3 GEN2 (All versions), blueplanet 105 TL3 (All versions < V3.92), blueplanet 105 TL3 G…
CVE-2025-40946US—OT elevated—
A vulnerability has been identified in blueplanet 100 NX3 M8 (All versions), blueplanet 100 TL3 GEN2 (All versions < V6.1.4.9), blueplanet 105 TL3 (All versions < V3.92), blueplane…
02

references

External citations — patches, advisories, analysis.

03

remediations (45)

  • No fix plannedblueplanet 3.0 TL3-60.0 TL3

    Currently no fix is planned

  • No fix availableblueplanet 100 NX3 M8

    Currently no fix is available

  • No fix availableblueplanet 100 NX3 M8

    Currently no fix is available

  • No fix availableblueplanet 100 TL3 GEN2

    Currently no fix is available

  • No fix availableblueplanet 105 TL3

    Currently no fix is available

  • No fix availableblueplanet 105 TL3

    Currently no fix is available

  • No fix availableblueplanet 105 TL3 GEN2

    Currently no fix is available

  • No fix availableblueplanet 110 TL3

    Currently no fix is available

  • No fix availableblueplanet 110 TL3

    Currently no fix is available

  • No fix availableblueplanet 125 NX3 M11

    Currently no fix is available

  • No fix availableblueplanet 125 NX3 M11

    Currently no fix is available

  • No fix availableblueplanet 125 TL3

    Currently no fix is available

  • No fix availableblueplanet 125 TL3

    Currently no fix is available

  • No fix availableblueplanet 125 TL3 GEN2

    Currently no fix is available

  • No fix availableblueplanet 137 TL3

    Currently no fix is available

  • No fix availableblueplanet 137 TL3

    Currently no fix is available

  • No fix availableblueplanet 150 TL3

    Currently no fix is available

  • No fix availableblueplanet 150 TL3

    Currently no fix is available

  • No fix availableblueplanet 150 TL3 GEN2

    Currently no fix is available

  • No fix availableblueplanet 155 TL3

    Currently no fix is available

  • No fix availableblueplanet 155 TL3

    Currently no fix is available

  • No fix availableblueplanet 155 TL3 GEN2

    Currently no fix is available

  • No fix availableblueplanet 165 TL3

    Currently no fix is available

  • No fix availableblueplanet 165 TL3

    Currently no fix is available

  • No fix availableblueplanet 165 TL3 GEN2

    Currently no fix is available

  • No fix availableblueplanet 87.0 TL3

    Currently no fix is available

  • No fix availableblueplanet 87.0 TL3

    Currently no fix is available

  • No fix availableblueplanet 87.0 TL3 GEN2

    Currently no fix is available

  • No fix availableblueplanet 92.0 TL3

    Currently no fix is available

  • No fix availableblueplanet 92.0 TL3

    Currently no fix is available

  • No fix availableblueplanet 92.0 TL3 GEN2

    Currently no fix is available

  • No fix availableblueplanet gridsafe 110 TL3-S

    Currently no fix is available

  • No fix availableblueplanet gridsafe 137 TL3-S

    Currently no fix is available

  • No fix availableblueplanet gridsafe 92.0 TL3-S

    Currently no fix is available

  • Fixedblueplanet 100 TL3 GEN2

    Update to V6.1.4.9 or later version

    https://kaco-newenergy.com/service/mykacocom-customer-portal
  • Fixedblueplanet 105 TL3 GEN2

    Update to V6.1.4.9 or later version

    https://kaco-newenergy.com/service/mykacocom-customer-portal
  • Fixedblueplanet 125 TL3 GEN2

    Update to V6.1.4.9 or later version

    https://kaco-newenergy.com/service/mykacocom-customer-portal
  • Fixedblueplanet 150 TL3 GEN2

    Update to V6.1.4.9 or later version

    https://kaco-newenergy.com/service/mykacocom-customer-portal
  • Fixedblueplanet 155 TL3 GEN2

    Update to V6.1.4.9 or later version

    https://kaco-newenergy.com/service/mykacocom-customer-portal
  • Fixedblueplanet 165 TL3 GEN2

    Update to V6.1.4.9 or later version

    https://kaco-newenergy.com/service/mykacocom-customer-portal
  • Fixedblueplanet 87.0 TL3 GEN2

    Update to V6.1.4.9 or later version

    https://kaco-newenergy.com/service/mykacocom-customer-portal
  • Fixedblueplanet 92.0 TL3 GEN2

    Update to V6.1.4.9 or later version

    https://kaco-newenergy.com/service/mykacocom-customer-portal
  • Fixedblueplanet gridsafe 110 TL3-S

    Update to V3.91 or later version

    https://kaco-newenergy.com/service/mykacocom-customer-portal
  • Fixedblueplanet gridsafe 137 TL3-S

    Update to V3.91 or later version

    https://kaco-newenergy.com/service/mykacocom-customer-portal
  • Fixedblueplanet gridsafe 92.0 TL3-S

    Update to V3.91 or later version

    https://kaco-newenergy.com/service/mykacocom-customer-portal
scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan