SSA-687955

csafDEsiemens_psirt

SSA-687955: Accessible Development Shell via Physical Interface in SIPROTEC 5

Advisory ansehen veröffentlicht 2025-02-11

Affected SIPROTEC 5 devices contain a development shell which is accessible via a physical interface which is not properly restricted. This could allow an unauthenticated attacker with physical access to an affected device to execute arbitrary commands on the device. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.

01

beschreibt (1)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2024-53648US—OT erhöht—
A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V9.90), SIPROTEC 5 6MD85 (CP200) (All versions), SIPROTEC 5 6MD85 (CP300) (All versions < V9.90), SI…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (122)

  • MitigationSIPROTEC 5 6MD84 (CP300)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 6MD85 (CP200)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 6MD85 (CP300)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 6MD86 (CP200)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 6MD86 (CP300)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 6MD89 (CP300)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 6MU85 (CP300)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7KE85 (CP200)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7KE85 (CP300)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7SA82 (CP100)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7SA82 (CP150)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7SA86 (CP200)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7SA86 (CP300)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7SA87 (CP200)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7SA87 (CP300)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7SD82 (CP100)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7SD82 (CP150)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7SD86 (CP200)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7SD86 (CP300)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7SD87 (CP200)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7SD87 (CP300)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7SJ81 (CP100)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7SJ81 (CP150)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7SJ82 (CP100)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7SJ82 (CP150)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7SJ85 (CP200)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7SJ85 (CP300)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7SJ86 (CP200)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7SJ86 (CP300)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7SK82 (CP100)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7SK82 (CP150)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7SK85 (CP200)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7SK85 (CP300)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7SL82 (CP100)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7SL82 (CP150)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7SL86 (CP200)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7SL86 (CP300)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7SL87 (CP200)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7SL87 (CP300)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7SS85 (CP200)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7SS85 (CP300)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7ST85 (CP200)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7ST85 (CP300)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7ST86 (CP300)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7SX82 (CP150)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7SX85 (CP300)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7SY82 (CP150)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7UM85 (CP300)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7UT82 (CP100)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7UT82 (CP150)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7UT85 (CP200)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7UT85 (CP300)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7UT86 (CP200)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7UT86 (CP300)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7UT87 (CP200)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7UT87 (CP300)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7VE85 (CP300)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7VK87 (CP200)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7VK87 (CP300)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 7VU85 (CP300)

    Restrict physical access to authorized individuals only to limit exposure

  • MitigationSIPROTEC 5 Compact 7SX800 (CP050)

    Restrict physical access to authorized individuals only to limit exposure

  • Kein Fix geplantSIPROTEC 5 6MD85 (CP200)

    Currently no fix is planned

  • Kein Fix geplantSIPROTEC 5 6MD86 (CP200)

    Currently no fix is planned

  • Kein Fix geplantSIPROTEC 5 7KE85 (CP200)

    Currently no fix is planned

  • Kein Fix geplantSIPROTEC 5 7SA86 (CP200)

    Currently no fix is planned

  • Kein Fix geplantSIPROTEC 5 7SA87 (CP200)

    Currently no fix is planned

  • Kein Fix geplantSIPROTEC 5 7SD86 (CP200)

    Currently no fix is planned

  • Kein Fix geplantSIPROTEC 5 7SD87 (CP200)

    Currently no fix is planned

  • Kein Fix geplantSIPROTEC 5 7SJ85 (CP200)

    Currently no fix is planned

  • Kein Fix geplantSIPROTEC 5 7SJ86 (CP200)

    Currently no fix is planned

  • Kein Fix geplantSIPROTEC 5 7SK85 (CP200)

    Currently no fix is planned

  • Kein Fix geplantSIPROTEC 5 7SL86 (CP200)

    Currently no fix is planned

  • Kein Fix geplantSIPROTEC 5 7SL87 (CP200)

    Currently no fix is planned

  • Kein Fix geplantSIPROTEC 5 7SS85 (CP200)

    Currently no fix is planned

  • Kein Fix geplantSIPROTEC 5 7ST85 (CP200)

    Currently no fix is planned

  • Kein Fix geplantSIPROTEC 5 7UT85 (CP200)

    Currently no fix is planned

  • Kein Fix geplantSIPROTEC 5 7UT86 (CP200)

    Currently no fix is planned

  • Kein Fix geplantSIPROTEC 5 7UT87 (CP200)

    Currently no fix is planned

  • Kein Fix geplantSIPROTEC 5 7VK87 (CP200)

    Currently no fix is planned

  • BehobenSIPROTEC 5 6MD84 (CP300)

    Update to V9.90 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • BehobenSIPROTEC 5 6MD85 (CP300)

    Update to V9.90 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • BehobenSIPROTEC 5 6MD86 (CP300)

    Update to V9.90 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • BehobenSIPROTEC 5 6MD89 (CP300)

    Update to V9.90 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • BehobenSIPROTEC 5 6MU85 (CP300)

    Update to V9.90 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • BehobenSIPROTEC 5 7KE85 (CP300)

    Update to V10.0 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109757430/
  • BehobenSIPROTEC 5 7SA82 (CP100)

    Update to V8.90 or later V8.xx version

  • BehobenSIPROTEC 5 7SA82 (CP150)

    Update to V9.90 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109757433/
  • BehobenSIPROTEC 5 7SA86 (CP300)

    Update to V9.90 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • BehobenSIPROTEC 5 7SA87 (CP300)

    Update to V9.90 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • BehobenSIPROTEC 5 7SD82 (CP100)

    Update to V8.90 or later V8.xx version

  • BehobenSIPROTEC 5 7SD82 (CP150)

    Update to V9.90 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109757433/
  • BehobenSIPROTEC 5 7SD86 (CP300)

    Update to V9.90 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • BehobenSIPROTEC 5 7SD87 (CP300)

    Update to V9.90 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • BehobenSIPROTEC 5 7SJ81 (CP100)

    Update to V8.90 or later V8.xx version

  • BehobenSIPROTEC 5 7SJ81 (CP150)

    Update to V9.90 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109757433/
  • BehobenSIPROTEC 5 7SJ82 (CP100)

    Update to V8.90 or later V8.xx version

  • BehobenSIPROTEC 5 7SJ82 (CP150)

    Update to V9.90 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109757433/
  • BehobenSIPROTEC 5 7SJ85 (CP300)

    Update to V9.90 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • BehobenSIPROTEC 5 7SJ86 (CP300)

    Update to V9.90 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • BehobenSIPROTEC 5 7SK82 (CP100)

    Update to V8.90 or later V8.xx version

  • BehobenSIPROTEC 5 7SK82 (CP150)

    Update to V9.90 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109757433/
  • BehobenSIPROTEC 5 7SK85 (CP300)

    Update to V9.90 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • BehobenSIPROTEC 5 7SL82 (CP100)

    Update to V8.90 or later V8.xx version

  • BehobenSIPROTEC 5 7SL82 (CP150)

    Update to V9.90 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109757433/
  • BehobenSIPROTEC 5 7SL86 (CP300)

    Update to V9.90 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • BehobenSIPROTEC 5 7SL87 (CP300)

    Update to V9.90 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • BehobenSIPROTEC 5 7SS85 (CP300)

    Update to V9.90 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • BehobenSIPROTEC 5 7ST85 (CP300)

    Update to V10.0 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109757430/
  • BehobenSIPROTEC 5 7ST86 (CP300)

    Update to V10.0 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109757430/
  • BehobenSIPROTEC 5 7SX82 (CP150)

    Update to V9.90 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109757433/
  • BehobenSIPROTEC 5 7SX85 (CP300)

    Update to V9.90 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • BehobenSIPROTEC 5 7SY82 (CP150)

    Update to V9.90 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109757433/
  • BehobenSIPROTEC 5 7UM85 (CP300)

    Update to V9.90 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • BehobenSIPROTEC 5 7UT82 (CP100)

    Update to V8.90 or later V8.xx version

  • BehobenSIPROTEC 5 7UT82 (CP150)

    Update to V9.90 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109757433/
  • BehobenSIPROTEC 5 7UT85 (CP300)

    Update to V9.90 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • BehobenSIPROTEC 5 7UT86 (CP300)

    Update to V9.90 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • BehobenSIPROTEC 5 7UT87 (CP300)

    Update to V9.90 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • BehobenSIPROTEC 5 7VE85 (CP300)

    Update to V9.90 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • BehobenSIPROTEC 5 7VK87 (CP300)

    Update to V9.90 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • BehobenSIPROTEC 5 7VU85 (CP300)

    Update to V9.90 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • BehobenSIPROTEC 5 Compact 7SX800 (CP050)

    Update to V9.90 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109796884/
scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan