SSA-222768: Multiple Vulnerabilities in SIRIUS 3SK2 Safety Relays and 3RK3 Modular Safety Systems
SIRIUS 3SK2 Safety Relays and 3RK3 Modular Safety Systems only provide weak password obfuscation. An attacker with access to the PROFINET or serial interface of the device could eavesdrop or read the stored password from the device and de-obfuscate it. The safety passwords work as protection against unauthorized operation (i.e., protection against inadvertent operating errors) but not as protection against malicious access attempts. Siemens is preparing fix versions and recommends countermeasures for products where fixes are not, or not yet available.
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-24009US | — | — | ||
A vulnerability has been identified in SIRIUS 3RK3 Modular Safety System (MSS) (All versions), SIRIUS Safety Relays 3SK2 (All versions). The affected devices do not require authent… | ||||
| CVE-2025-24008US | —OT elevated | — | ||
A vulnerability has been identified in SIRIUS 3RK3 Modular Safety System (MSS) (All versions), SIRIUS Safety Relays 3SK2 (All versions). The affected devices do not encrypt data in… | ||||
| CVE-2025-24007US | —OT elevated | — | ||
A vulnerability has been identified in SIRIUS 3RK3 Modular Safety System (MSS) (All versions), SIRIUS Safety Relays 3SK2 (All versions). Affected devices only provide weak password… | ||||
references
External citations — patches, advisories, analysis.
remediations (12)
- MitigationSIRIUS 3RK3 Modular Safety System (MSS)
Ensure network isolation of the PROFINET interface to prevent access from unauthorized systems
- MitigationSIRIUS 3RK3 Modular Safety System (MSS)
Ensure network isolation of the PROFINET interface to prevent access from unauthorized systems
- MitigationSIRIUS 3RK3 Modular Safety System (MSS)
Ensure network isolation of the PROFINET interface to prevent access from unauthorized systems
- MitigationSIRIUS Safety Relays 3SK2
Ensure network isolation of the PROFINET interface to prevent access from unauthorized systems
- MitigationSIRIUS Safety Relays 3SK2
Ensure network isolation of the PROFINET interface to prevent access from unauthorized systems
- MitigationSIRIUS Safety Relays 3SK2
Ensure network isolation of the PROFINET interface to prevent access from unauthorized systems
- No fix plannedSIRIUS 3RK3 Modular Safety System (MSS)
Currently no fix is planned
- No fix plannedSIRIUS 3RK3 Modular Safety System (MSS)
Currently no fix is planned
- No fix plannedSIRIUS 3RK3 Modular Safety System (MSS)
Currently no fix is planned
- No fix availableSIRIUS Safety Relays 3SK2
Currently no fix is available
- No fix availableSIRIUS Safety Relays 3SK2
Currently no fix is available
- No fix availableSIRIUS Safety Relays 3SK2
Currently no fix is available
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan