SSA-687955

csafDEsiemens_psirt

SSA-687955: Accessible Development Shell via Physical Interface in SIPROTEC 5

view advisory published 2025-02-11

Affected SIPROTEC 5 devices contain a development shell which is accessible via a physical interface which is not properly restricted. This could allow an unauthenticated attacker with physical access to an affected device to execute arbitrary commands on the device. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2024-53648US—OT elevated—
A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V9.90), SIPROTEC 5 6MD85 (CP200) (All versions), SIPROTEC 5 6MD85 (CP300) (All versions < V9.90), SI…
02

references

External citations — patches, advisories, analysis.

03

remediations (122)

  • MitigationSIPROTEC 5 6MD84 (CP300)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 6MD85 (CP200)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 6MD85 (CP300)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 6MD86 (CP200)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 6MD86 (CP300)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 6MD89 (CP300)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 6MU85 (CP300)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7KE85 (CP200)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7KE85 (CP300)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7SA82 (CP100)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7SA82 (CP150)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7SA86 (CP200)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7SA86 (CP300)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7SA87 (CP200)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7SA87 (CP300)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7SD82 (CP100)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7SD82 (CP150)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7SD86 (CP200)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7SD86 (CP300)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7SD87 (CP200)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7SD87 (CP300)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7SJ81 (CP100)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7SJ81 (CP150)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7SJ82 (CP100)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7SJ82 (CP150)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7SJ85 (CP200)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7SJ85 (CP300)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7SJ86 (CP200)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7SJ86 (CP300)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7SK82 (CP100)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7SK82 (CP150)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7SK85 (CP200)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7SK85 (CP300)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7SL82 (CP100)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7SL82 (CP150)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7SL86 (CP200)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7SL86 (CP300)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7SL87 (CP200)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7SL87 (CP300)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7SS85 (CP200)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7SS85 (CP300)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7ST85 (CP200)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7ST85 (CP300)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7ST86 (CP300)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7SX82 (CP150)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7SX85 (CP300)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7SY82 (CP150)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7UM85 (CP300)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7UT82 (CP100)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7UT82 (CP150)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7UT85 (CP200)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7UT85 (CP300)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7UT86 (CP200)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7UT86 (CP300)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7UT87 (CP200)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7UT87 (CP300)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7VE85 (CP300)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7VK87 (CP200)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7VK87 (CP300)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7VU85 (CP300)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 Compact 7SX800 (CP050)

    Restrict physical access to authorized individuals only to limit exposure

  • No fix plannedSIPROTEC 5 6MD85 (CP200)

    Currently no fix is planned

  • No fix plannedSIPROTEC 5 6MD86 (CP200)

    Currently no fix is planned

  • No fix plannedSIPROTEC 5 7KE85 (CP200)

    Currently no fix is planned

  • No fix plannedSIPROTEC 5 7SA86 (CP200)

    Currently no fix is planned

  • No fix plannedSIPROTEC 5 7SA87 (CP200)

    Currently no fix is planned

  • No fix plannedSIPROTEC 5 7SD86 (CP200)

    Currently no fix is planned

  • No fix plannedSIPROTEC 5 7SD87 (CP200)

    Currently no fix is planned

  • No fix plannedSIPROTEC 5 7SJ85 (CP200)

    Currently no fix is planned

  • No fix plannedSIPROTEC 5 7SJ86 (CP200)

    Currently no fix is planned

  • No fix plannedSIPROTEC 5 7SK85 (CP200)

    Currently no fix is planned

  • No fix plannedSIPROTEC 5 7SL86 (CP200)

    Currently no fix is planned

  • No fix plannedSIPROTEC 5 7SL87 (CP200)

    Currently no fix is planned

  • No fix plannedSIPROTEC 5 7SS85 (CP200)

    Currently no fix is planned

  • No fix plannedSIPROTEC 5 7ST85 (CP200)

    Currently no fix is planned

  • No fix plannedSIPROTEC 5 7UT85 (CP200)

    Currently no fix is planned

  • No fix plannedSIPROTEC 5 7UT86 (CP200)

    Currently no fix is planned

  • No fix plannedSIPROTEC 5 7UT87 (CP200)

    Currently no fix is planned

  • No fix plannedSIPROTEC 5 7VK87 (CP200)

    Currently no fix is planned

  • FixedSIPROTEC 5 6MD84 (CP300)

    Update to V9.90 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • FixedSIPROTEC 5 6MD85 (CP300)

    Update to V9.90 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • FixedSIPROTEC 5 6MD86 (CP300)

    Update to V9.90 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • FixedSIPROTEC 5 6MD89 (CP300)

    Update to V9.90 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • FixedSIPROTEC 5 6MU85 (CP300)

    Update to V9.90 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • FixedSIPROTEC 5 7KE85 (CP300)

    Update to V10.0 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109757430/
  • FixedSIPROTEC 5 7SA82 (CP100)

    Update to V8.90 or later V8.xx version

  • FixedSIPROTEC 5 7SA82 (CP150)

    Update to V9.90 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109757433/
  • FixedSIPROTEC 5 7SA86 (CP300)

    Update to V9.90 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • FixedSIPROTEC 5 7SA87 (CP300)

    Update to V9.90 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • FixedSIPROTEC 5 7SD82 (CP100)

    Update to V8.90 or later V8.xx version

  • FixedSIPROTEC 5 7SD82 (CP150)

    Update to V9.90 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109757433/
  • FixedSIPROTEC 5 7SD86 (CP300)

    Update to V9.90 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • FixedSIPROTEC 5 7SD87 (CP300)

    Update to V9.90 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • FixedSIPROTEC 5 7SJ81 (CP100)

    Update to V8.90 or later V8.xx version

  • FixedSIPROTEC 5 7SJ81 (CP150)

    Update to V9.90 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109757433/
  • FixedSIPROTEC 5 7SJ82 (CP100)

    Update to V8.90 or later V8.xx version

  • FixedSIPROTEC 5 7SJ82 (CP150)

    Update to V9.90 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109757433/
  • FixedSIPROTEC 5 7SJ85 (CP300)

    Update to V9.90 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • FixedSIPROTEC 5 7SJ86 (CP300)

    Update to V9.90 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • FixedSIPROTEC 5 7SK82 (CP100)

    Update to V8.90 or later V8.xx version

  • FixedSIPROTEC 5 7SK82 (CP150)

    Update to V9.90 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109757433/
  • FixedSIPROTEC 5 7SK85 (CP300)

    Update to V9.90 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • FixedSIPROTEC 5 7SL82 (CP100)

    Update to V8.90 or later V8.xx version

  • FixedSIPROTEC 5 7SL82 (CP150)

    Update to V9.90 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109757433/
  • FixedSIPROTEC 5 7SL86 (CP300)

    Update to V9.90 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • FixedSIPROTEC 5 7SL87 (CP300)

    Update to V9.90 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • FixedSIPROTEC 5 7SS85 (CP300)

    Update to V9.90 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • FixedSIPROTEC 5 7ST85 (CP300)

    Update to V10.0 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109757430/
  • FixedSIPROTEC 5 7ST86 (CP300)

    Update to V10.0 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109757430/
  • FixedSIPROTEC 5 7SX82 (CP150)

    Update to V9.90 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109757433/
  • FixedSIPROTEC 5 7SX85 (CP300)

    Update to V9.90 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • FixedSIPROTEC 5 7SY82 (CP150)

    Update to V9.90 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109757433/
  • FixedSIPROTEC 5 7UM85 (CP300)

    Update to V9.90 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • FixedSIPROTEC 5 7UT82 (CP100)

    Update to V8.90 or later V8.xx version

  • FixedSIPROTEC 5 7UT82 (CP150)

    Update to V9.90 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109757433/
  • FixedSIPROTEC 5 7UT85 (CP300)

    Update to V9.90 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • FixedSIPROTEC 5 7UT86 (CP300)

    Update to V9.90 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • FixedSIPROTEC 5 7UT87 (CP300)

    Update to V9.90 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • FixedSIPROTEC 5 7VE85 (CP300)

    Update to V9.90 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • FixedSIPROTEC 5 7VK87 (CP300)

    Update to V9.90 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • FixedSIPROTEC 5 7VU85 (CP300)

    Update to V9.90 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • FixedSIPROTEC 5 Compact 7SX800 (CP050)

    Update to V9.90 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109796884/
scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan