CVE-2024-34057

highPriorität · verfolgen · 30EPSS 0.004 · 38. PerzentilDEEUNLUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

0.44% (38th) EPSS

CVSS 7.5 · high

Is it mine?

31 products

Prüfe deine Angriffsfläche

Who says so?

6 sources

cnnvd · enisa_euvd · cert_bund · cisa_csaf_ot

EPSS · bewertet 2026-10-22

Triangle Microworks TMW IEC 61850 Client source code libraries before 12.2.0 lack a buffer size check when processing received messages. The resulting buffer overflow can cause a crash, resulting in a denial of service.

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

BehobenET85 Ethernet Interface IEC61850 Ed.2siemens_psirt
Update to V03.27 or later version The firmware ET85 V3.27 is present within “CP-8000/CP-8021/CP-8022 Package” V16.52
BehobenETI5 Ethernet Int. 1x100TX IEC61850siemens_psirt
Update to V05.30 or later version The firmware ETI5 V5.30 is present within “CP-8031/CP-8050 Package” V5.30 https://support.industry.siemens.com/cs/ww/en/view/109804985/
BehobenSICAM SCCsiemens_psirt
Update to V9.14 HF2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109745469/
BehobenSITIPE ATsiemens_psirt
Update to V3.21 or later version
https://support.industry.siemens.com/cs/ww/en/view/109895930/
BehobenET85 Ethernet Interface IEC61850 Ed.2cisa_csaf_ot
Update to V03.27 or later version The firmware ET85 V3.27 is present within “CP-8000/CP-8021/CP-8022 Package” V16.52
BehobenETI5 Ethernet Int. 1x100TX IEC61850cisa_csaf_ot
Update to V05.30 or later version The firmware ETI5 V5.30 is present within “CP-8031/CP-8050 Package” V5.30 https://support.industry.siemens.com/cs/ww/en/view/109804985/
BehobenSICAM SCCcisa_csaf_ot
Update to V9.14 HF2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109745469/
BehobenSITIPE ATcisa_csaf_ot
Update to V3.21 or later version
https://support.industry.siemens.com/cs/ww/en/view/109895930/

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

8.2

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 6.9–8.2

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hprimary · NVD / NIST USAusnutzbarkeit 3.9 · Auswirkung 3.6

v3.18.2highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:Hsecondary · CISA US

v3.18.2highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:Hsecondary · ENISA EU

v3.18.2highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:HsecondaryAusnutzbarkeit 3.9 · Auswirkung 4.2

v3.18.2highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:Hsecondary · Siemens ProductCERT DE

v3.16.9mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:Usecondary · CVSS-BT (t0sche)

v3.18.2highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:Hsecondary · NCSC-NL NL

SSVC

Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.

Exploitation: none · Automatable: yes · Technical Impact: partialcoordinatorcisa_ssvcUS

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-120USprimärCWE-120USCWE-120USCWE-120US

betroffene Produkte (31)

Betroffene Produkte und Versionsbereiche.

Siemens SICAM 8 Software Solutionalle Versionencert_bundDEcpe:/h:siemens:sicam:8_software_solution
Siemens SICAM A8000 Devicealle Versionencert_bundDEcpe:/h:siemens:sicam:a8000_device
Siemens SICAM EGS Devicealle Versionencert_bundDEcpe:/h:siemens:sicam:egs_device
Siemens SICAM SCC <10.0alle Versionencert_bundDE
Siemens SICAM≤ SCC <10.0cert_bundDE
ET85 Ethernet Interface IEC61850 Ed.2alle Versionencisa_csaf_otUS
ETI5 Ethernet Int. 1x100TX IEC61850alle Versionencisa_csaf_otUS
SICAM SCCalle Versionencisa_csaf_otUS
SITIPE ATalle Versionencisa_csaf_otUS
Siemens ET85 Ethernet Interface IEC61850 Ed.2≤ vers:intdot/<03.27cisa_csaf_otUS
Siemens ETI5 Ethernet Int. 1x100TX IEC61850≤ vers:intdot/<05.30cisa_csaf_otUS
Siemens SICAM SCC< V9.14_HF2cisa_csaf_otUS
Siemens SITIPE AT≤ vers:intdot/<3.21cisa_csaf_otUS
n/a n/a≤ n/aenisa_euvdEU
eti5_ethernet_int._1x100tx_iec61850alle Versionenncsc_nlNLcpe:2.3:a:siemens:eti5_ethernet_int._1x100tx_iec61850:*:*:*:*:*:*:*:*
sicamalle Versionenncsc_nlNLcpe:2.3:h:siemens:sicam:egs_device:*:*:*:*:*:*:*
sicamalle Versionenncsc_nlNLcpe:2.3:h:siemens:sicam:8_software_solution:*:*:*:*:*:*:*
sicamalle Versionenncsc_nlNLcpe:2.3:h:siemens:sicam:a8000_device:*:*:*:*:*:*:*
sicam_sccalle Versionenncsc_nlNLcpe:2.3:a:siemens:sicam_scc:*:*:*:*:*:*:*:*
sicam_scc__10.0alle Versionenncsc_nlNLcpe:2.3:a:siemens:sicam_scc__10.0:*:*:*:*:*:*:*:*

20 von 31 angezeigt

Advisories (4)

Hersteller- und Ökosystem-Meldungen dazu.

NCSC-2024-0362Kwetsbaarheden verholpen in Siemens productenNL2024-09-10csaf · ncsc_nlNL
Siemens heeft kwetsbaarheden verholpen in diverse producten als Mendix, SICAM, SIMATIC, SINEMA, SINUMERIK en Tecnomatix.
SSA-673996SSA-673996: Buffer Overflow Vulnerability in Third-Party Component in SICAM and SITIPE Products2024-09-10csaf · siemens_psirtDE
Multiple SICAM products are affected by buffer overflow vulnerability in the IEC 61850 Client libraries from Triangle MicroWorks that could allow an unauthenticated remote attacker to create a denial of service condition by sending specially crafted MMS messages. Affected SICAM and SITIPE products: - SICAM A8000 Device firmware - ET85 for CP-8000/CP-8021/CP-8022 - ETI5 for CP-8031/CP-8050 - SICAM EGS Device firmware - ETI5 - SICAM S8000 - ETI5 - SICAM SCC - SITIPE AT Siemens has released new versions for the affected products and recommends to update to the latest versions.
WID-SEC-W-2024-2094Siemens SICAM Produkte: Schwachstelle ermöglicht Denial of ServiceDeutsch2024-09-09csaf · cert_bundDE
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Siemens SICAM Produkte ausnutzen, um einen Denial of Service Angriff durchzuführen.
ICSA-24-256-16Siemens Third-Party Component in SICAM and SITIPE Products2024-09-10icsa · cisa_csaf_otUS
Multiple SICAM products are affected by buffer overflow vulnerability in the IEC 61850 Client libraries from Triangle MicroWorks that could allow an unauthenticated remote attacker to create a denial of service condition by sending specially crafted MMS messages. Affected SICAM and SITIPE products: - SICAM A8000 Device firmware - ET85 for CP-8000/CP-8021/CP-8022 - ETI5 for CP-8031/CP-8050 - SICAM EGS Device firmware - ETI5 - SICAM S8000 - ETI5 - SICAM SCC - SITIPE AT Siemens has released new versions for the affected products and recommends to update to the latest versions.

auch bekannt als (3)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd cert_bund cisa_csaf_ot ncsc_nl siemens_psirt NVD CVE.org MITRE

veröffentlicht 2024-09-18geändert 2026-06-17

verwandt (5,658)

Verwandte Einträge.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2025-43520US	medium5.5OT kritisch	0.43% (36th)	KEV	2025-12-12
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS So…
CVE-2025-20333US	—OT kritisch	71.2% (99th)	KEV	2025-09-25
A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an aut…
CVE-2025-39682US	critical9.8OT kritisch	2.88% (87th)	KEV	2025-09-05
In the Linux kernel, the following vulnerability has been resolved: tls: fix handling of zero-length records on the rx_list Each recvmsg() call must process either - only contig…
CVE-2025-31277US	—OT kritisch	1.66% (76th)	KEV	2025-07-30
The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Proc…
CVE-2025-24985US	—OT kritisch	3.89% (90th)	KEV	2025-03-11
Integer overflow or wraparound in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally.

+5653 weitere

Referenzen (7)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan