CVE-2024-52504

highPriorität · verfolgen · 0EPSS 0.004 · 38. PerzentilDEEUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

0.44% (38th) EPSS

CVSS 7.5 · high

Is it mine?

118 products

Prüfe deine Angriffsfläche

Who says so?

5 sources

cnnvd · enisa_euvd · cert_bund · cisa_csaf_ot

EPSS · bewertet 2026-10-27

A vulnerability has been identified in SIPROTEC 4 6MD61 (All versions), SIPROTEC 4 6MD63 (All versions), SIPROTEC 4 6MD66 (All versions), SIPROTEC 4 6MD665 (All versions), SIPROTEC 4 7SA522 (All versions), SIPROTEC 4 7SA6 (All versions < V4.78), SIPROTEC 4 7SD5 (All versions < V4.78), SIPROTEC 4 7SD610 (All versions < V4.78), SIPROTEC 4 7SJ61 (All versions), SIPROTEC 4 7SJ62 (All versions), SIPROTEC 4 7SJ63 (All versions), SIPROTEC 4 7SJ64 (All versions), SIPROTEC 4 7SJ66 (All versions), SIPROTEC 4 7SS52 (All versions), SIPROTEC 4 7ST6 (All versions), SIPROTEC 4 7UM61 (All versions), SIPROTEC 4 7UM62 (All versions), SIPROTEC 4 7UT612 (All versions), SIPROTEC 4 7UT613 (All versions), SIPROTEC 4 7UT63 (All versions), SIPROTEC 4 7VE6 (All versions), SIPROTEC 4 7VK61 (All versions), SIPROTEC 4 7VU683 (All versions), SIPROTEC 4 Compact 7RW80 (All versions), SIPROTEC 4 Compact 7SD80 (All versions), SIPROTEC 4 Compact 7SJ80 (All versions), SIPROTEC 4 Compact 7SJ81 (All versions), SIPROTEC 4 Compact 7SK80 (All versions), SIPROTEC 4 Compact 7SK81 (All versions). Affected devices do not properly handle interrupted operations of file transfer. This could allow an unauthenticated remote attacker to cause a denial of service condition. To restore normal operations, the devices need to be restarted.

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

BehobenSIPROTEC 4 7SA6siemens_psirt
Update to V4.78 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743560/
BehobenSIPROTEC 4 7SD5siemens_psirt
Update to V4.78 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743563/
BehobenSIPROTEC 4 7SD610siemens_psirt
Update to V4.78 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743573/
BehobenSIPROTEC 4 7SA6cisa_csaf_ot
Update to V4.78 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743560/
BehobenSIPROTEC 4 7SD5cisa_csaf_ot
Update to V4.78 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743563/
BehobenSIPROTEC 4 7SD610cisa_csaf_ot
Update to V4.78 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743573/
Kein Fix verfügbarSIPROTEC 4 7SJ66siemens_psirt
Currently no fix is available
Kein Fix verfügbarSIPROTEC 4 7SJ66cisa_csaf_ot
Currently no fix is available
Kein Fix geplantSIPROTEC 4 6MD61siemens_psirt
Currently no fix is planned
Kein Fix geplantSIPROTEC 4 6MD63siemens_psirt
Currently no fix is planned
Kein Fix geplantSIPROTEC 4 6MD66siemens_psirt
Currently no fix is planned
Kein Fix geplantSIPROTEC 4 6MD665siemens_psirt
Currently no fix is planned
Kein Fix geplantSIPROTEC 4 7SA522siemens_psirt
Currently no fix is planned
Kein Fix geplantSIPROTEC 4 7SJ61siemens_psirt
Currently no fix is planned
Kein Fix geplantSIPROTEC 4 7SJ62siemens_psirt
Currently no fix is planned
Kein Fix geplantSIPROTEC 4 7SJ63siemens_psirt
Currently no fix is planned
Kein Fix geplantSIPROTEC 4 7SJ64siemens_psirt
Currently no fix is planned
Kein Fix geplantSIPROTEC 4 7SS52siemens_psirt
Currently no fix is planned
Kein Fix geplantSIPROTEC 4 7ST6siemens_psirt
Currently no fix is planned
Kein Fix geplantSIPROTEC 4 7UM61siemens_psirt
Currently no fix is planned
Kein Fix geplantSIPROTEC 4 7UM62siemens_psirt
Currently no fix is planned
Kein Fix geplantSIPROTEC 4 7UT612siemens_psirt
Currently no fix is planned
Kein Fix geplantSIPROTEC 4 7UT613siemens_psirt
Currently no fix is planned
Kein Fix geplantSIPROTEC 4 7UT63siemens_psirt
Currently no fix is planned
Kein Fix geplantSIPROTEC 4 7VE6siemens_psirt
Currently no fix is planned
Kein Fix geplantSIPROTEC 4 7VK61siemens_psirt
Currently no fix is planned
Kein Fix geplantSIPROTEC 4 7VU683siemens_psirt
Currently no fix is planned
Kein Fix geplantSIPROTEC 4 Compact 7RW80siemens_psirt
Currently no fix is planned
Kein Fix geplantSIPROTEC 4 Compact 7SD80siemens_psirt
Currently no fix is planned
Kein Fix geplantSIPROTEC 4 Compact 7SJ80siemens_psirt
Currently no fix is planned
Kein Fix geplantSIPROTEC 4 Compact 7SJ81siemens_psirt
Currently no fix is planned
Kein Fix geplantSIPROTEC 4 Compact 7SK80siemens_psirt
Currently no fix is planned
Kein Fix geplantSIPROTEC 4 Compact 7SK81siemens_psirt
Currently no fix is planned
Kein Fix geplantSIPROTEC 4 6MD61cisa_csaf_ot
Currently no fix is planned
Kein Fix geplantSIPROTEC 4 6MD63cisa_csaf_ot
Currently no fix is planned
Kein Fix geplantSIPROTEC 4 6MD66cisa_csaf_ot
Currently no fix is planned
Kein Fix geplantSIPROTEC 4 6MD665cisa_csaf_ot
Currently no fix is planned
Kein Fix geplantSIPROTEC 4 7SA522cisa_csaf_ot
Currently no fix is planned
Kein Fix geplantSIPROTEC 4 7SJ61cisa_csaf_ot
Currently no fix is planned
Kein Fix geplantSIPROTEC 4 7SJ62cisa_csaf_ot
Currently no fix is planned
Kein Fix geplantSIPROTEC 4 7SJ63cisa_csaf_ot
Currently no fix is planned
Kein Fix geplantSIPROTEC 4 7SJ64cisa_csaf_ot
Currently no fix is planned
Kein Fix geplantSIPROTEC 4 7SS52cisa_csaf_ot
Currently no fix is planned
Kein Fix geplantSIPROTEC 4 7ST6cisa_csaf_ot
Currently no fix is planned
Kein Fix geplantSIPROTEC 4 7UM61cisa_csaf_ot
Currently no fix is planned
Kein Fix geplantSIPROTEC 4 7UM62cisa_csaf_ot
Currently no fix is planned
Kein Fix geplantSIPROTEC 4 7UT612cisa_csaf_ot
Currently no fix is planned
Kein Fix geplantSIPROTEC 4 7UT613cisa_csaf_ot
Currently no fix is planned
Kein Fix geplantSIPROTEC 4 7UT63cisa_csaf_ot
Currently no fix is planned
Kein Fix geplantSIPROTEC 4 7VE6cisa_csaf_ot
Currently no fix is planned
Kein Fix geplantSIPROTEC 4 7VK61cisa_csaf_ot
Currently no fix is planned
Kein Fix geplantSIPROTEC 4 7VU683cisa_csaf_ot
Currently no fix is planned
Kein Fix geplantSIPROTEC 4 Compact 7RW80cisa_csaf_ot
Currently no fix is planned
Kein Fix geplantSIPROTEC 4 Compact 7SD80cisa_csaf_ot
Currently no fix is planned
Kein Fix geplantSIPROTEC 4 Compact 7SJ80cisa_csaf_ot
Currently no fix is planned
Kein Fix geplantSIPROTEC 4 Compact 7SJ81cisa_csaf_ot
Currently no fix is planned
Kein Fix geplantSIPROTEC 4 Compact 7SK80cisa_csaf_ot
Currently no fix is planned
Kein Fix geplantSIPROTEC 4 Compact 7SK81cisa_csaf_ot
Currently no fix is planned

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

8.7

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 6.6–8.7

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · CISA US

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · productcert@siemens.com DEAusnutzbarkeit 3.9 · Auswirkung 3.6

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · Siemens ProductCERT DE

v4.08.7highCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:Nsecondary · ENISA EU

v4.08.7highCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · productcert@siemens.com DE

v4.06.6mediumCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · CVSS-BT (t0sche)

SSVC

Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.

Exploitation: none · Automatable: yes · Technical Impact: partialcoordinatorcisa_ssvcUS

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-754USCWE-754USCWE-754US

betroffene Produkte (118)

Betroffene Produkte und Versionsbereiche.

Siemens SIPROTEC 4 <V4.78alle Versionencert_bundDE
Siemens SIPROTEC≤ 4 <V4.78cert_bundDE
SIPROTEC 4 6MD61alle Versionencisa_csaf_otUS
SIPROTEC 4 6MD63alle Versionencisa_csaf_otUS
SIPROTEC 4 6MD66alle Versionencisa_csaf_otUS
SIPROTEC 4 6MD665alle Versionencisa_csaf_otUS
SIPROTEC 4 7SA522alle Versionencisa_csaf_otUS
SIPROTEC 4 7SA6alle Versionencisa_csaf_otUS
SIPROTEC 4 7SD5alle Versionencisa_csaf_otUS
SIPROTEC 4 7SD610alle Versionencisa_csaf_otUS
SIPROTEC 4 7SJ61alle Versionencisa_csaf_otUS
SIPROTEC 4 7SJ62alle Versionencisa_csaf_otUS
SIPROTEC 4 7SJ63alle Versionencisa_csaf_otUS
SIPROTEC 4 7SJ64alle Versionencisa_csaf_otUS
SIPROTEC 4 7SJ66alle Versionencisa_csaf_otUS
SIPROTEC 4 7SS52alle Versionencisa_csaf_otUS
SIPROTEC 4 7ST6alle Versionencisa_csaf_otUS
SIPROTEC 4 7UM61alle Versionencisa_csaf_otUS
SIPROTEC 4 7UM62alle Versionencisa_csaf_otUS
SIPROTEC 4 7UT612alle Versionencisa_csaf_otUS

20 von 118 angezeigt

Advisories (3)

Hersteller- und Ökosystem-Meldungen dazu.

SSA-400089SSA-400089: Denial of Service Vulnerability in SIPROTEC 4 and SIPROTEC 4 Compact2025-08-12csaf · siemens_psirtDE
SIPROTEC 4 and SIPROTEC 4 Compact devices contain a vulnerability that could allow an unauthenticated remote attacker to cause a denial of service condition. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends countermeasures for products where fixes are not, or not yet available.
WID-SEC-W-2025-1768Siemens SIPROTEC: Mehrere Schwachstellen ermöglichen Denial of ServiceDeutsch2025-08-12csaf · cert_bundDE
Ein entfernter, anonymer Angreifer oder ein Angreifer mit physischem Zugriff kann mehrere Schwachstellen in Siemens SIPROTEC ausnutzen, um einen Denial of Service Angriff durchzuführen.
ICSA-25-226-12Siemens SIPROTEC 4 and SIPROTEC 4 Compact2025-08-12icsa · cisa_csaf_otUS
SIPROTEC 4 and SIPROTEC 4 Compact devices contain a vulnerability that could allow an unauthenticated remote attacker to cause a denial of service condition. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends countermeasures for products where fixes are not, or not yet available.

auch bekannt als (3)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd cert_bund cisa_csaf_ot siemens_psirt NVD CVE.org MITRE

veröffentlicht 2025-08-12geändert 2026-06-17

Referenzen (3)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan