ICSA-25-016-04

Siemens SIPROTEC 5 Products

Advisory ansehen veröffentlicht 2025-01-14

Affected SIPROTEC 5 devices do not properly limit the access of the web server to the filesystem. This could allow an authenticated remote attacker to read arbitrary files or the entire filesystem of the device. Siemens has released new versions for the affected products and recommends to update to the latest versions.

beschreibt (1)

Zugehörige CVEs.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2024-53649US	—	0.62% (49th)	—	2025-01-14
A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V9.80), SIPROTEC 5 6MD85 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 6MD86 (CP300) (All vers…

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

Behebungen (86)

MitigationSIPROTEC 5 6MD84 (CP300)
Disable the web server of the affected system
MitigationSIPROTEC 5 6MD85 (CP300)
Disable the web server of the affected system
MitigationSIPROTEC 5 6MD86 (CP300)
Disable the web server of the affected system
MitigationSIPROTEC 5 6MD89 (CP300)
Disable the web server of the affected system
MitigationSIPROTEC 5 6MU85 (CP300)
Disable the web server of the affected system
MitigationSIPROTEC 5 7KE85 (CP300)
Disable the web server of the affected system
MitigationSIPROTEC 5 7SA82 (CP100)
Disable the web server of the affected system
MitigationSIPROTEC 5 7SA82 (CP150)
Disable the web server of the affected system
MitigationSIPROTEC 5 7SA86 (CP300)
Disable the web server of the affected system
MitigationSIPROTEC 5 7SA87 (CP300)
Disable the web server of the affected system
MitigationSIPROTEC 5 7SD82 (CP100)
Disable the web server of the affected system
MitigationSIPROTEC 5 7SD82 (CP150)
Disable the web server of the affected system
MitigationSIPROTEC 5 7SD86 (CP300)
Disable the web server of the affected system
MitigationSIPROTEC 5 7SD87 (CP300)
Disable the web server of the affected system
MitigationSIPROTEC 5 7SJ81 (CP100)
Disable the web server of the affected system
MitigationSIPROTEC 5 7SJ81 (CP150)
Disable the web server of the affected system
MitigationSIPROTEC 5 7SJ82 (CP100)
Disable the web server of the affected system
MitigationSIPROTEC 5 7SJ82 (CP150)
Disable the web server of the affected system
MitigationSIPROTEC 5 7SJ85 (CP300)
Disable the web server of the affected system
MitigationSIPROTEC 5 7SJ86 (CP300)
Disable the web server of the affected system
MitigationSIPROTEC 5 7SK82 (CP100)
Disable the web server of the affected system
MitigationSIPROTEC 5 7SK82 (CP150)
Disable the web server of the affected system
MitigationSIPROTEC 5 7SK85 (CP300)
Disable the web server of the affected system
MitigationSIPROTEC 5 7SL82 (CP100)
Disable the web server of the affected system
MitigationSIPROTEC 5 7SL82 (CP150)
Disable the web server of the affected system
MitigationSIPROTEC 5 7SL86 (CP300)
Disable the web server of the affected system
MitigationSIPROTEC 5 7SL87 (CP300)
Disable the web server of the affected system
MitigationSIPROTEC 5 7SS85 (CP300)
Disable the web server of the affected system
MitigationSIPROTEC 5 7ST85 (CP300)
Disable the web server of the affected system
MitigationSIPROTEC 5 7ST86 (CP300)
Disable the web server of the affected system
MitigationSIPROTEC 5 7SX82 (CP150)
Disable the web server of the affected system
MitigationSIPROTEC 5 7SX85 (CP300)
Disable the web server of the affected system
MitigationSIPROTEC 5 7SY82 (CP150)
Disable the web server of the affected system
MitigationSIPROTEC 5 7UM85 (CP300)
Disable the web server of the affected system
MitigationSIPROTEC 5 7UT82 (CP100)
Disable the web server of the affected system
MitigationSIPROTEC 5 7UT82 (CP150)
Disable the web server of the affected system
MitigationSIPROTEC 5 7UT85 (CP300)
Disable the web server of the affected system
MitigationSIPROTEC 5 7UT86 (CP300)
Disable the web server of the affected system
MitigationSIPROTEC 5 7UT87 (CP300)
Disable the web server of the affected system
MitigationSIPROTEC 5 7VE85 (CP300)
Disable the web server of the affected system
MitigationSIPROTEC 5 7VK87 (CP300)
Disable the web server of the affected system
MitigationSIPROTEC 5 7VU85 (CP300)
Disable the web server of the affected system
MitigationSIPROTEC 5 Compact 7SX800 (CP050)
Disable the web server of the affected system
BehobenSIPROTEC 5 6MD84 (CP300)
Update to V9.80 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/
BehobenSIPROTEC 5 6MD85 (CP300)
Update to V9.80 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757428/
BehobenSIPROTEC 5 6MD86 (CP300)
Update to V9.80 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757428/
BehobenSIPROTEC 5 6MD89 (CP300)
Update to V9.68 or later version
https://support.industry.siemens.com/cs/ww/en/view/109742950/
BehobenSIPROTEC 5 6MU85 (CP300)
Update to V9.80 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757428/
BehobenSIPROTEC 5 7KE85 (CP300)
Update to V9.80 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757428/
BehobenSIPROTEC 5 7SA82 (CP100)
Update to V8.90 or later V8.xx version
BehobenSIPROTEC 5 7SA82 (CP150)
Update to V9.80 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/
BehobenSIPROTEC 5 7SA86 (CP300)
Update to V9.80 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757428/
BehobenSIPROTEC 5 7SA87 (CP300)
Update to V9.80 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757428/
BehobenSIPROTEC 5 7SD82 (CP100)
Update to V8.90 or later V8.xx version
BehobenSIPROTEC 5 7SD82 (CP150)
Update to V9.80 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/
BehobenSIPROTEC 5 7SD86 (CP300)
Update to V9.80 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757428/
BehobenSIPROTEC 5 7SD87 (CP300)
Update to V9.80 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757428/
BehobenSIPROTEC 5 7SJ81 (CP100)
Update to V8.90 or later V8.xx version
BehobenSIPROTEC 5 7SJ81 (CP150)
Update to V9.80 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/
BehobenSIPROTEC 5 7SJ82 (CP100)
Update to V8.90 or later V8.xx version
BehobenSIPROTEC 5 7SJ82 (CP150)
Update to V9.80 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/
BehobenSIPROTEC 5 7SJ85 (CP300)
Update to V9.80 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757428/
BehobenSIPROTEC 5 7SJ86 (CP300)
Update to V9.80 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757428/
BehobenSIPROTEC 5 7SK82 (CP100)
Update to V8.90 or later V8.xx version
BehobenSIPROTEC 5 7SK82 (CP150)
Update to V9.80 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/
BehobenSIPROTEC 5 7SK85 (CP300)
Update to V9.80 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757428/
BehobenSIPROTEC 5 7SL82 (CP100)
Update to V8.90 or later V8.xx version
BehobenSIPROTEC 5 7SL82 (CP150)
Update to V9.80 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/
BehobenSIPROTEC 5 7SL86 (CP300)
Update to V9.80 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757428/
BehobenSIPROTEC 5 7SL87 (CP300)
Update to V9.80 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757428/
BehobenSIPROTEC 5 7SS85 (CP300)
Update to V9.80 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757428/
BehobenSIPROTEC 5 7ST85 (CP300)
Update to V9.68 or later version
https://support.industry.siemens.com/cs/ww/en/view/109742950/
BehobenSIPROTEC 5 7ST86 (CP300)
Update to V9.80 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/
BehobenSIPROTEC 5 7SX82 (CP150)
Update to V9.80 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/
BehobenSIPROTEC 5 7SX85 (CP300)
Update to V9.80 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757428/
BehobenSIPROTEC 5 7SY82 (CP150)
Update to V9.80 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/
BehobenSIPROTEC 5 7UM85 (CP300)
Update to V9.80 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757428/
BehobenSIPROTEC 5 7UT82 (CP100)
Update to V8.90 or later V8.xx version
BehobenSIPROTEC 5 7UT82 (CP150)
Update to V9.80 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/
BehobenSIPROTEC 5 7UT85 (CP300)
Update to V9.80 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757428/
BehobenSIPROTEC 5 7UT86 (CP300)
Update to V9.80 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757428/
BehobenSIPROTEC 5 7UT87 (CP300)
Update to V9.80 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757428/
BehobenSIPROTEC 5 7VE85 (CP300)
Update to V9.80 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757428/
BehobenSIPROTEC 5 7VK87 (CP300)
Update to V9.80 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757428/
BehobenSIPROTEC 5 7VU85 (CP300)
Update to V9.80 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/
BehobenSIPROTEC 5 Compact 7SX800 (CP050)
Update to V9.80 or later version
https://support.industry.siemens.com/cs/ww/en/view/109796884/

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan