ICSA-26-174-02

icsaUScisa_csaf_ot

Siemens SIPROTEC 5 Using DIGSI5 Protocol

view advisory published 2026-06-09

SIPROTEC 5 is vulnerable to arbitrary file uploads by authenticated users using the DIGSI 5 protocol. This could allow an attacker to upload malicious configuration files, potentially causing a permanent denial of service condition. As a mitigation measure, users of the CP050 and CP150 device models are advised to upgrade to version 9.90 or later. For CP300 device models, devices 7ST85 and 7ST86 are advised to upgrade to version 10.00 or later, while the remaining models should upgrade to version 9.90 or later. These versions introduce an allow-list feature that restricts arbitrary file uploads and reduces the risk associated with this vulnerability. Siemens is preparing fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2025-40808US——
A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions), SIPROTEC 5 6MD85 (CP200) (All versions), SIPROTEC 5 6MD85 (CP300) (All versions), SIPROTEC 5 6MD86 (…
02

references

External citations — patches, advisories, analysis.

03

remediations (122)

  • MitigationSIPROTEC 5 6MD84 (CP300)

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 6MD85 (CP200)

    Apply password protection to all DIGSI connections to ensure secure communication

  • MitigationSIPROTEC 5 6MD85 (CP300)

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 6MD86 (CP200)

    Apply password protection to all DIGSI connections to ensure secure communication

  • MitigationSIPROTEC 5 6MD86 (CP300)

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 6MD89 (CP300)

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 6MU85 (CP300)

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 7KE85 (CP200)

    Apply password protection to all DIGSI connections to ensure secure communication

  • MitigationSIPROTEC 5 7KE85 (CP300)

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 7SA82 (CP100)

    Apply password protection to all DIGSI connections to ensure secure communication

  • MitigationSIPROTEC 5 7SA82 (CP150)

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 7SA86 (CP200)

    Apply password protection to all DIGSI connections to ensure secure communication

  • MitigationSIPROTEC 5 7SA86 (CP300)

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 7SA87 (CP200)

    Apply password protection to all DIGSI connections to ensure secure communication

  • MitigationSIPROTEC 5 7SA87 (CP300)

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 7SD82 (CP100)

    Apply password protection to all DIGSI connections to ensure secure communication

  • MitigationSIPROTEC 5 7SD82 (CP150)

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 7SD86 (CP200)

    Apply password protection to all DIGSI connections to ensure secure communication

  • MitigationSIPROTEC 5 7SD86 (CP300)

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 7SD87 (CP200)

    Apply password protection to all DIGSI connections to ensure secure communication

  • MitigationSIPROTEC 5 7SD87 (CP300)

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 7SJ81 (CP100)

    Apply password protection to all DIGSI connections to ensure secure communication

  • MitigationSIPROTEC 5 7SJ81 (CP150)

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 7SJ82 (CP100)

    Apply password protection to all DIGSI connections to ensure secure communication

  • MitigationSIPROTEC 5 7SJ82 (CP150)

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 7SJ85 (CP200)

    Apply password protection to all DIGSI connections to ensure secure communication

  • MitigationSIPROTEC 5 7SJ85 (CP300)

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 7SJ86 (CP200)

    Apply password protection to all DIGSI connections to ensure secure communication

  • MitigationSIPROTEC 5 7SJ86 (CP300)

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 7SK82 (CP100)

    Apply password protection to all DIGSI connections to ensure secure communication

  • MitigationSIPROTEC 5 7SK82 (CP150)

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 7SK85 (CP200)

    Apply password protection to all DIGSI connections to ensure secure communication

  • MitigationSIPROTEC 5 7SK85 (CP300)

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 7SL82 (CP100)

    Apply password protection to all DIGSI connections to ensure secure communication

  • MitigationSIPROTEC 5 7SL82 (CP150)

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 7SL86 (CP200)

    Apply password protection to all DIGSI connections to ensure secure communication

  • MitigationSIPROTEC 5 7SL86 (CP300)

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 7SL87 (CP200)

    Apply password protection to all DIGSI connections to ensure secure communication

  • MitigationSIPROTEC 5 7SL87 (CP300)

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 7SS85 (CP200)

    Apply password protection to all DIGSI connections to ensure secure communication

  • MitigationSIPROTEC 5 7SS85 (CP300)

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 7ST85 (CP200)

    Apply password protection to all DIGSI connections to ensure secure communication

  • MitigationSIPROTEC 5 7ST85 (CP300)

    Apply password protection to all DIGSI connections to ensure secure communication

  • MitigationSIPROTEC 5 7ST86 (CP300)

    Apply password protection to all DIGSI connections to ensure secure communication

  • MitigationSIPROTEC 5 7SX82 (CP150)

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 7SX85 (CP300)

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 7SY82 (CP150)

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 7UM85 (CP300)

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 7UT82 (CP100)

    Apply password protection to all DIGSI connections to ensure secure communication

  • MitigationSIPROTEC 5 7UT82 (CP150)

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 7UT85 (CP200)

    Apply password protection to all DIGSI connections to ensure secure communication

  • MitigationSIPROTEC 5 7UT85 (CP300)

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 7UT86 (CP200)

    Apply password protection to all DIGSI connections to ensure secure communication

  • MitigationSIPROTEC 5 7UT86 (CP300)

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 7UT87 (CP200)

    Apply password protection to all DIGSI connections to ensure secure communication

  • MitigationSIPROTEC 5 7UT87 (CP300)

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 7VE85 (CP300)

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 7VK87 (CP200)

    Apply password protection to all DIGSI connections to ensure secure communication

  • MitigationSIPROTEC 5 7VK87 (CP300)

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 7VU85 (CP300)

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 Compact 7SX800 (CP050)

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • No fix plannedSIPROTEC 5 6MD85 (CP200)

    Currently no fix is planned

  • No fix plannedSIPROTEC 5 6MD86 (CP200)

    Currently no fix is planned

  • No fix plannedSIPROTEC 5 7KE85 (CP200)

    Currently no fix is planned

  • No fix plannedSIPROTEC 5 7SA82 (CP100)

    Currently no fix is planned

  • No fix plannedSIPROTEC 5 7SA86 (CP200)

    Currently no fix is planned

  • No fix plannedSIPROTEC 5 7SA87 (CP200)

    Currently no fix is planned

  • No fix plannedSIPROTEC 5 7SD82 (CP100)

    Currently no fix is planned

  • No fix plannedSIPROTEC 5 7SD86 (CP200)

    Currently no fix is planned

  • No fix plannedSIPROTEC 5 7SD87 (CP200)

    Currently no fix is planned

  • No fix plannedSIPROTEC 5 7SJ81 (CP100)

    Currently no fix is planned

  • No fix plannedSIPROTEC 5 7SJ82 (CP100)

    Currently no fix is planned

  • No fix plannedSIPROTEC 5 7SJ85 (CP200)

    Currently no fix is planned

  • No fix plannedSIPROTEC 5 7SJ86 (CP200)

    Currently no fix is planned

  • No fix plannedSIPROTEC 5 7SK82 (CP100)

    Currently no fix is planned

  • No fix plannedSIPROTEC 5 7SK85 (CP200)

    Currently no fix is planned

  • No fix plannedSIPROTEC 5 7SL82 (CP100)

    Currently no fix is planned

  • No fix plannedSIPROTEC 5 7SL86 (CP200)

    Currently no fix is planned

  • No fix plannedSIPROTEC 5 7SL87 (CP200)

    Currently no fix is planned

  • No fix plannedSIPROTEC 5 7SS85 (CP200)

    Currently no fix is planned

  • No fix plannedSIPROTEC 5 7ST85 (CP200)

    Currently no fix is planned

  • No fix plannedSIPROTEC 5 7UT82 (CP100)

    Currently no fix is planned

  • No fix plannedSIPROTEC 5 7UT85 (CP200)

    Currently no fix is planned

  • No fix plannedSIPROTEC 5 7UT86 (CP200)

    Currently no fix is planned

  • No fix plannedSIPROTEC 5 7UT87 (CP200)

    Currently no fix is planned

  • No fix plannedSIPROTEC 5 7VK87 (CP200)

    Currently no fix is planned

  • No fix availableSIPROTEC 5 6MD84 (CP300)

    Currently no fix is available

  • No fix availableSIPROTEC 5 6MD85 (CP300)

    Currently no fix is available

  • No fix availableSIPROTEC 5 6MD86 (CP300)

    Currently no fix is available

  • No fix availableSIPROTEC 5 6MD89 (CP300)

    Currently no fix is available

  • No fix availableSIPROTEC 5 6MU85 (CP300)

    Currently no fix is available

  • No fix availableSIPROTEC 5 7KE85 (CP300)

    Currently no fix is available

  • No fix availableSIPROTEC 5 7SA82 (CP150)

    Currently no fix is available

  • No fix availableSIPROTEC 5 7SA86 (CP300)

    Currently no fix is available

  • No fix availableSIPROTEC 5 7SA87 (CP300)

    Currently no fix is available

  • No fix availableSIPROTEC 5 7SD82 (CP150)

    Currently no fix is available

  • No fix availableSIPROTEC 5 7SD86 (CP300)

    Currently no fix is available

  • No fix availableSIPROTEC 5 7SD87 (CP300)

    Currently no fix is available

  • No fix availableSIPROTEC 5 7SJ81 (CP150)

    Currently no fix is available

  • No fix availableSIPROTEC 5 7SJ82 (CP150)

    Currently no fix is available

  • No fix availableSIPROTEC 5 7SJ85 (CP300)

    Currently no fix is available

  • No fix availableSIPROTEC 5 7SJ86 (CP300)

    Currently no fix is available

  • No fix availableSIPROTEC 5 7SK82 (CP150)

    Currently no fix is available

  • No fix availableSIPROTEC 5 7SK85 (CP300)

    Currently no fix is available

  • No fix availableSIPROTEC 5 7SL82 (CP150)

    Currently no fix is available

  • No fix availableSIPROTEC 5 7SL86 (CP300)

    Currently no fix is available

  • No fix availableSIPROTEC 5 7SL87 (CP300)

    Currently no fix is available

  • No fix availableSIPROTEC 5 7SS85 (CP300)

    Currently no fix is available

  • No fix availableSIPROTEC 5 7ST85 (CP300)

    Currently no fix is available

  • No fix availableSIPROTEC 5 7ST86 (CP300)

    Currently no fix is available

  • No fix availableSIPROTEC 5 7SX82 (CP150)

    Currently no fix is available

  • No fix availableSIPROTEC 5 7SX85 (CP300)

    Currently no fix is available

  • No fix availableSIPROTEC 5 7SY82 (CP150)

    Currently no fix is available

  • No fix availableSIPROTEC 5 7UM85 (CP300)

    Currently no fix is available

  • No fix availableSIPROTEC 5 7UT82 (CP150)

    Currently no fix is available

  • No fix availableSIPROTEC 5 7UT85 (CP300)

    Currently no fix is available

  • No fix availableSIPROTEC 5 7UT86 (CP300)

    Currently no fix is available

  • No fix availableSIPROTEC 5 7UT87 (CP300)

    Currently no fix is available

  • No fix availableSIPROTEC 5 7VE85 (CP300)

    Currently no fix is available

  • No fix availableSIPROTEC 5 7VK87 (CP300)

    Currently no fix is available

  • No fix availableSIPROTEC 5 7VU85 (CP300)

    Currently no fix is available

  • No fix availableSIPROTEC 5 Compact 7SX800 (CP050)

    Currently no fix is available

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan