SSA-552874

csafDEsiemens_psirt

SSA-552874: Denial of Service Vulnerability in SIPROTEC 5 Devices

view advisory published 2022-12-13

Devices of the SIPROTEC 5 family contain a vulnerability related to secure client-initiated renegotiation. This could allow an unauthenticated attacker to cause a denial of service condition for the duration of the attack. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2022-45044US——
A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V9.50), SIPROTEC 5 6MD85 (CP200) (All versions), SIPROTEC 5 6MD85 (CP300) (All versions < V9.50), SI…
02

references

External citations — patches, advisories, analysis.

03

remediations (132)

  • MitigationSIPROTEC 5 6MD84 (CP300)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 6MD85 (CP200)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 6MD85 (CP300)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 6MD86 (CP200)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 6MD86 (CP300)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 6MD89 (CP300)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 6MU85 (CP300)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7KE85 (CP200)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7KE85 (CP300)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7SA82 (CP100)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7SA82 (CP150)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7SA84 (CP200)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7SA86 (CP200)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7SA86 (CP300)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7SA87 (CP200)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7SA87 (CP300)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7SD82 (CP100)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7SD82 (CP150)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7SD84 (CP200)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7SD86 (CP200)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7SD86 (CP300)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7SD87 (CP200)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7SD87 (CP300)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7SJ81 (CP100)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7SJ81 (CP150)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7SJ82 (CP100)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7SJ82 (CP150)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7SJ85 (CP200)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7SJ85 (CP300)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7SJ86 (CP200)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7SJ86 (CP300)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7SK82 (CP100)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7SK82 (CP150)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7SK85 (CP200)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7SK85 (CP300)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7SL82 (CP100)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7SL82 (CP150)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7SL86 (CP200)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7SL86 (CP300)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7SL87 (CP200)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7SL87 (CP300)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7SS85 (CP200)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7SS85 (CP300)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7ST85 (CP200)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7ST85 (CP300)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7ST86 (CP300)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7SX82 (CP150)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7SX85 (CP300)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7UM85 (CP300)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7UT82 (CP100)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7UT82 (CP150)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7UT85 (CP200)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7UT85 (CP300)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7UT86 (CP200)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7UT86 (CP300)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7UT87 (CP200)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7UT87 (CP300)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7VE85 (CP300)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7VK87 (CP200)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7VK87 (CP300)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7VU85 (CP300)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 Communication Module ETH-BA-2EL (Rev.1)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 Communication Module ETH-BB-2FO (Rev. 1)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 Communication Module ETH-BD-2FO

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 Compact 7SX800 (CP050)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • No fix plannedSIPROTEC 5 6MD85 (CP200)

    Currently no fix is planned

  • No fix plannedSIPROTEC 5 6MD86 (CP200)

    Currently no fix is planned

  • No fix plannedSIPROTEC 5 7KE85 (CP200)

    Currently no fix is planned

  • No fix plannedSIPROTEC 5 7SA84 (CP200)

    Currently no fix is planned

  • No fix plannedSIPROTEC 5 7SA86 (CP200)

    Currently no fix is planned

  • No fix plannedSIPROTEC 5 7SA87 (CP200)

    Currently no fix is planned

  • No fix plannedSIPROTEC 5 7SD84 (CP200)

    Currently no fix is planned

  • No fix plannedSIPROTEC 5 7SD86 (CP200)

    Currently no fix is planned

  • No fix plannedSIPROTEC 5 7SD87 (CP200)

    Currently no fix is planned

  • No fix plannedSIPROTEC 5 7SJ85 (CP200)

    Currently no fix is planned

  • No fix plannedSIPROTEC 5 7SJ86 (CP200)

    Currently no fix is planned

  • No fix plannedSIPROTEC 5 7SK85 (CP200)

    Currently no fix is planned

  • No fix plannedSIPROTEC 5 7SL86 (CP200)

    Currently no fix is planned

  • No fix plannedSIPROTEC 5 7SL87 (CP200)

    Currently no fix is planned

  • No fix plannedSIPROTEC 5 7SS85 (CP200)

    Currently no fix is planned

  • No fix plannedSIPROTEC 5 7ST85 (CP200)

    Currently no fix is planned

  • No fix plannedSIPROTEC 5 7UT85 (CP200)

    Currently no fix is planned

  • No fix plannedSIPROTEC 5 7UT86 (CP200)

    Currently no fix is planned

  • No fix plannedSIPROTEC 5 7UT87 (CP200)

    Currently no fix is planned

  • No fix plannedSIPROTEC 5 7VK87 (CP200)

    Currently no fix is planned

  • No fix plannedSIPROTEC 5 Communication Module ETH-BA-2EL (Rev.1)

    Currently no fix is planned

  • No fix plannedSIPROTEC 5 Communication Module ETH-BB-2FO (Rev. 1)

    Currently no fix is planned

  • FixedSIPROTEC 5 6MD84 (CP300)

    Update to V9.50 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • FixedSIPROTEC 5 6MD85 (CP300)

    Update to V9.50 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • FixedSIPROTEC 5 6MD86 (CP300)

    Update to V9.50 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • FixedSIPROTEC 5 6MD89 (CP300)

    Update to V9.64 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109742950/
  • FixedSIPROTEC 5 6MU85 (CP300)

    Update to V9.50 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • FixedSIPROTEC 5 7KE85 (CP300)

    Update to V9.64 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109742950/
  • FixedSIPROTEC 5 7SA82 (CP100)

    Update to V8.90 or later V8.xx version

  • FixedSIPROTEC 5 7SA82 (CP150)

    Update to V9.50 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109757433/
  • FixedSIPROTEC 5 7SA86 (CP300)

    Update to V9.50 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • FixedSIPROTEC 5 7SA87 (CP300)

    Update to V9.50 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • FixedSIPROTEC 5 7SD82 (CP100)

    Update to V8.90 or later V8.xx version

  • FixedSIPROTEC 5 7SD82 (CP150)

    Update to V9.50 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109757433/
  • FixedSIPROTEC 5 7SD86 (CP300)

    Update to V9.50 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • FixedSIPROTEC 5 7SD87 (CP300)

    Update to V9.50 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • FixedSIPROTEC 5 7SJ81 (CP100)

    Update to V8.89 or later V8.xx version

  • FixedSIPROTEC 5 7SJ81 (CP150)

    Update to V9.50 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109757433/
  • FixedSIPROTEC 5 7SJ82 (CP100)

    Update to V8.89 or later V8.xx version

  • FixedSIPROTEC 5 7SJ82 (CP150)

    Update to V9.50 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109757433/
  • FixedSIPROTEC 5 7SJ85 (CP300)

    Update to V9.50 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • FixedSIPROTEC 5 7SJ86 (CP300)

    Update to V9.50 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • FixedSIPROTEC 5 7SK82 (CP100)

    Update to V8.89 or later V8.xx version

  • FixedSIPROTEC 5 7SK82 (CP150)

    Update to V9.50 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109757433/
  • FixedSIPROTEC 5 7SK85 (CP300)

    Update to V9.50 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • FixedSIPROTEC 5 7SL82 (CP100)

    Update to V8.90 or later V8.xx version

  • FixedSIPROTEC 5 7SL82 (CP150)

    Update to V9.50 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109757433/
  • FixedSIPROTEC 5 7SL86 (CP300)

    Update to V9.50 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • FixedSIPROTEC 5 7SL87 (CP300)

    Update to V9.50 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • FixedSIPROTEC 5 7SS85 (CP300)

    Update to V9.50 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • FixedSIPROTEC 5 7ST85 (CP300)

    Update to V9.64 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109742950/
  • FixedSIPROTEC 5 7ST86 (CP300)

    Update to V9.64 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109742950/
  • FixedSIPROTEC 5 7SX82 (CP150)

    Update to V9.50 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109757433/
  • FixedSIPROTEC 5 7SX85 (CP300)

    Update to V9.50 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • FixedSIPROTEC 5 7UM85 (CP300)

    Update to V9.50 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • FixedSIPROTEC 5 7UT82 (CP100)

    Update to V8.90 or later V8.xx version

  • FixedSIPROTEC 5 7UT82 (CP150)

    Update to V9.50 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109757433/
  • FixedSIPROTEC 5 7UT85 (CP300)

    Update to V9.50 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • FixedSIPROTEC 5 7UT86 (CP300)

    Update to V9.50 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • FixedSIPROTEC 5 7UT87 (CP300)

    Update to V9.50 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • FixedSIPROTEC 5 7VE85 (CP300)

    Update to V9.50 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • FixedSIPROTEC 5 7VK87 (CP300)

    Update to V9.50 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • FixedSIPROTEC 5 7VU85 (CP300)

    Update to V9.50 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • FixedSIPROTEC 5 Communication Module ETH-BA-2EL (Rev.1)

    Update to V8.89 or later V8.xx version

    https://support.industry.siemens.com/cs/ww/en/view/109740816/
  • FixedSIPROTEC 5 Communication Module ETH-BB-2FO (Rev. 1)

    Update to V8.89 or later V8.xx version

    https://support.industry.siemens.com/cs/ww/en/view/109740816/
  • FixedSIPROTEC 5 Communication Module ETH-BD-2FO

    Update to V9.50 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109740816/
  • FixedSIPROTEC 5 Compact 7SX800 (CP050)

    Update to V9.50 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109796884/
scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan