CVE-2025-40742
mediumPriorität · verfolgen · 0EPSS 0.003 · 24. PerzentilDEEUNLRUUSEPSS · bewertet 2026-10-24
A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V11.0), SIPROTEC 5 6MD85 (CP200) (All versions), SIPROTEC 5 6MD85 (CP300) (All versions < V11.0), SIPROTEC 5 6MD86 (CP200) (All versions), SIPROTEC 5 6MD86 (CP300) (All versions < V11.0), SIPROTEC 5 6MD89 (CP300) (All versions < V11.0), SIPROTEC 5 6MD89 (CP300) V9.6x (All versions < V11.0), SIPROTEC 5 6MU85 (CP300) (All versions < V11.0), SIPROTEC 5 7KE85 (CP200) (All versions), SIPROTEC 5 7KE85 (CP300) (All versions < V11.0), SIPROTEC 5 7SA82 (CP100) (All versions), SIPROTEC 5 7SA82 (CP150) (All versions < V11.0), SIPROTEC 5 7SA84 (CP200) (All versions), SIPROTEC 5 7SA86 (CP200) (All versions), SIPROTEC 5 7SA86 (CP300) (All versions < V11.0), SIPROTEC 5 7SA87 (CP200) (All versions), SIPROTEC 5 7SA87 (CP300) (All versions < V11.0), SIPROTEC 5 7SD82 (CP100) (All versions), SIPROTEC 5 7SD82 (CP150) (All versions < V11.0), SIPROTEC 5 7SD84 (CP200) (All versions), SIPROTEC 5 7SD86 (CP200) (All versions), SIPROTEC 5 7SD86 (CP300) (All versions < V11.0), SIPROTEC 5 7SD87 (CP200) (All versions), SIPROTEC 5 7SD87 (CP300) (All versions < V11.0), SIPROTEC 5 7SJ81 (CP100) (All versions), SIPROTEC 5 7SJ81 (CP150) (All versions < V11.0), SIPROTEC 5 7SJ82 (CP100) (All versions), SIPROTEC 5 7SJ82 (CP150) (All versions < V11.0), SIPROTEC 5 7SJ85 (CP200) (All versions), SIPROTEC 5 7SJ85 (CP300) (All versions < V11.0), SIPROTEC 5 7SJ86 (CP200) (All versions), SIPROTEC 5 7SJ86 (CP300) (All versions < V11.0), SIPROTEC 5 7SK82 (CP100) (All versions), SIPROTEC 5 7SK82 (CP150) (All versions < V11.0), SIPROTEC 5 7SK85 (CP200) (All versions), SIPROTEC 5 7SK85 (CP300) (All versions < V11.0), SIPROTEC 5 7SL82 (CP100) (All versions), SIPROTEC 5 7SL82 (CP150) (All versions < V11.0), SIPROTEC 5 7SL86 (CP200) (All versions), SIPROTEC 5 7SL86 (CP300) (All versions < V11.0), SIPROTEC 5 7SL87 (CP200) (All versions), SIPROTEC 5 7SL87 (CP300) (All versions < V11.0), SIPROTEC 5 7SS85 (CP200) (All versions), SIPROTEC 5 7SS85 (CP300) (All versions < V11.0), SIPROTEC 5 7ST85 (CP200) (All versions), SIPROTEC 5 7ST85 (CP300) (All versions < V11.0), SIPROTEC 5 7ST86 (CP300) (All versions < V11.0), SIPROTEC 5 7SX82 (CP150) (All versions < V11.0), SIPROTEC 5 7SX85 (CP300) (All versions < V11.0), SIPROTEC 5 7SY82 (CP150) (All versions < V11.0), SIPROTEC 5 7UM85 (CP300) (All versions < V11.0), SIPROTEC 5 7UT82 (CP100) (All versions), SIPROTEC 5 7UT82 (CP150) (All versions < V11.0), SIPROTEC 5 7UT85 (CP200) (All versions), SIPROTEC 5 7UT85 (CP300) (All versions < V11.0), SIPROTEC 5 7UT86 (CP200) (All versions), SIPROTEC 5 7UT86 (CP300) (All versions < V11.0), SIPROTEC 5 7UT87 (CP200) (All versions), SIPROTEC 5 7UT87 (CP300) (All versions < V11.0), SIPROTEC 5 7VE85 (CP300) (All versions < V11.0), SIPROTEC 5 7VK87 (CP200) (All versions), SIPROTEC 5 7VK87 (CP300) (All versions < V11.0), SIPROTEC 5 7VU85 (CP300) (All versions < V11.0), SIPROTEC 5 Compact 7SX800 (CP050) (All versions < V11.0). The affected devices include session identifiers in URL requests for certain functionalities. This could allow an attacker to retrieve sensitive session data from browser history, logs, or other storage mechanisms, potentially leading to unauthorized access.
Behebungen
Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.
Ein Hersteller-Fix ist verfügbar.
- BehobenSIPROTEC 5 6MD84 (CP300)siemens_psirt
Update to V11.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/ - BehobenSIPROTEC 5 6MD85 (CP300)siemens_psirt
Update to V11.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/ - BehobenSIPROTEC 5 6MD86 (CP300)siemens_psirt
Update to V11.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/ - BehobenSIPROTEC 5 6MD89 (CP300)siemens_psirt
Update to V11.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/ - BehobenSIPROTEC 5 6MD89 (CP300) V9.6xsiemens_psirt
Update to V11.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/ - BehobenSIPROTEC 5 6MU85 (CP300)siemens_psirt
Update to V11.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/ - BehobenSIPROTEC 5 7KE85 (CP300)siemens_psirt
Update to V11.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/ - BehobenSIPROTEC 5 7SA82 (CP150)siemens_psirt
Update to V11.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757433/ - BehobenSIPROTEC 5 7SA86 (CP300)siemens_psirt
Update to V11.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/ - BehobenSIPROTEC 5 7SA87 (CP300)siemens_psirt
Update to V11.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/ - BehobenSIPROTEC 5 7SD82 (CP150)siemens_psirt
Update to V11.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757433/ - BehobenSIPROTEC 5 7SD86 (CP300)siemens_psirt
Update to V11.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/ - BehobenSIPROTEC 5 7SD87 (CP300)siemens_psirt
Update to V11.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/ - BehobenSIPROTEC 5 7SJ81 (CP150)siemens_psirt
Update to V11.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757433/ - BehobenSIPROTEC 5 7SJ82 (CP150)siemens_psirt
Update to V11.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757433/ - BehobenSIPROTEC 5 7SJ85 (CP300)siemens_psirt
Update to V11.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/ - BehobenSIPROTEC 5 7SJ86 (CP300)siemens_psirt
Update to V11.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/ - BehobenSIPROTEC 5 7SK82 (CP150)siemens_psirt
Update to V11.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757433/ - BehobenSIPROTEC 5 7SK85 (CP300)siemens_psirt
Update to V11.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/ - BehobenSIPROTEC 5 7SL82 (CP150)siemens_psirt
Update to V11.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757433/ - BehobenSIPROTEC 5 7SL86 (CP300)siemens_psirt
Update to V11.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/ - BehobenSIPROTEC 5 7SL87 (CP300)siemens_psirt
Update to V11.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/ - BehobenSIPROTEC 5 7SS85 (CP300)siemens_psirt
Update to V11.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/ - BehobenSIPROTEC 5 7ST85 (CP300)siemens_psirt
Update to V11.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/ - BehobenSIPROTEC 5 7ST86 (CP300)siemens_psirt
Update to V11.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/ - BehobenSIPROTEC 5 7SX82 (CP150)siemens_psirt
Update to V11.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757433/ - BehobenSIPROTEC 5 7SX85 (CP300)siemens_psirt
Update to V11.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/ - BehobenSIPROTEC 5 7SY82 (CP150)siemens_psirt
Update to V11.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757433/ - BehobenSIPROTEC 5 7UM85 (CP300)siemens_psirt
Update to V11.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/ - BehobenSIPROTEC 5 7UT82 (CP150)siemens_psirt
Update to V11.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757433/ - BehobenSIPROTEC 5 7UT85 (CP300)siemens_psirt
Update to V11.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/ - BehobenSIPROTEC 5 7UT86 (CP300)siemens_psirt
Update to V11.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/ - BehobenSIPROTEC 5 7UT87 (CP300)siemens_psirt
Update to V11.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/ - BehobenSIPROTEC 5 7VE85 (CP300)siemens_psirt
Update to V11.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/ - BehobenSIPROTEC 5 7VK87 (CP300)siemens_psirt
Update to V11.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/ - BehobenSIPROTEC 5 7VU85 (CP300)siemens_psirt
Update to V11.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/ - BehobenSIPROTEC 5 Compact 7SX800 (CP050)siemens_psirt
Update to V11.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109796884/ - BehobenSIPROTEC 5 6MD84 (CP300)cisa_csaf_ot
Update to V11.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/ - BehobenSIPROTEC 5 6MD85 (CP300)cisa_csaf_ot
Update to V11.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/ - BehobenSIPROTEC 5 6MD86 (CP300)cisa_csaf_ot
Update to V11.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/ - BehobenSIPROTEC 5 6MD89 (CP300)cisa_csaf_ot
Update to V11.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/ - BehobenSIPROTEC 5 6MD89 (CP300) V9.6xcisa_csaf_ot
Update to V11.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/ - BehobenSIPROTEC 5 6MU85 (CP300)cisa_csaf_ot
Update to V11.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/ - BehobenSIPROTEC 5 7KE85 (CP300)cisa_csaf_ot
Update to V11.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/ - BehobenSIPROTEC 5 7SA82 (CP150)cisa_csaf_ot
Update to V11.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757433/ - BehobenSIPROTEC 5 7SA86 (CP300)cisa_csaf_ot
Update to V11.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/ - BehobenSIPROTEC 5 7SA87 (CP300)cisa_csaf_ot
Update to V11.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/ - BehobenSIPROTEC 5 7SD82 (CP150)cisa_csaf_ot
Update to V11.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757433/ - BehobenSIPROTEC 5 7SD86 (CP300)cisa_csaf_ot
Update to V11.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/ - BehobenSIPROTEC 5 7SD87 (CP300)cisa_csaf_ot
Update to V11.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/ - BehobenSIPROTEC 5 7SJ81 (CP150)cisa_csaf_ot
Update to V11.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757433/ - BehobenSIPROTEC 5 7SJ82 (CP150)cisa_csaf_ot
Update to V11.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757433/ - BehobenSIPROTEC 5 7SJ85 (CP300)cisa_csaf_ot
Update to V11.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/ - BehobenSIPROTEC 5 7SJ86 (CP300)cisa_csaf_ot
Update to V11.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/ - BehobenSIPROTEC 5 7SK82 (CP150)cisa_csaf_ot
Update to V11.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757433/ - BehobenSIPROTEC 5 7SK85 (CP300)cisa_csaf_ot
Update to V11.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/ - BehobenSIPROTEC 5 7SL82 (CP150)cisa_csaf_ot
Update to V11.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757433/ - BehobenSIPROTEC 5 7SL86 (CP300)cisa_csaf_ot
Update to V11.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/ - BehobenSIPROTEC 5 7SL87 (CP300)cisa_csaf_ot
Update to V11.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/ - BehobenSIPROTEC 5 7SS85 (CP300)cisa_csaf_ot
Update to V11.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/ - BehobenSIPROTEC 5 7ST85 (CP300)cisa_csaf_ot
Update to V11.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/ - BehobenSIPROTEC 5 7ST86 (CP300)cisa_csaf_ot
Update to V11.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/ - BehobenSIPROTEC 5 7SX82 (CP150)cisa_csaf_ot
Update to V11.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757433/ - BehobenSIPROTEC 5 7SX85 (CP300)cisa_csaf_ot
Update to V11.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/ - BehobenSIPROTEC 5 7SY82 (CP150)cisa_csaf_ot
Update to V11.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757433/ - BehobenSIPROTEC 5 7UM85 (CP300)cisa_csaf_ot
Update to V11.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/ - BehobenSIPROTEC 5 7UT82 (CP150)cisa_csaf_ot
Update to V11.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757433/ - BehobenSIPROTEC 5 7UT85 (CP300)cisa_csaf_ot
Update to V11.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/ - BehobenSIPROTEC 5 7UT86 (CP300)cisa_csaf_ot
Update to V11.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/ - BehobenSIPROTEC 5 7UT87 (CP300)cisa_csaf_ot
Update to V11.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/ - BehobenSIPROTEC 5 7VE85 (CP300)cisa_csaf_ot
Update to V11.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/ - BehobenSIPROTEC 5 7VK87 (CP300)cisa_csaf_ot
Update to V11.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/ - BehobenSIPROTEC 5 7VU85 (CP300)cisa_csaf_ot
Update to V11.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/ - BehobenSIPROTEC 5 Compact 7SX800 (CP050)cisa_csaf_ot
Update to V11.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109796884/ - Kein Fix verfügbarSIPROTEC 5 7SA82 (CP100)siemens_psirt
Currently no fix is available
- Kein Fix verfügbarSIPROTEC 5 7SD82 (CP100)siemens_psirt
Currently no fix is available
- Kein Fix verfügbarSIPROTEC 5 7SJ81 (CP100)siemens_psirt
Currently no fix is available
- Kein Fix verfügbarSIPROTEC 5 7SJ82 (CP100)siemens_psirt
Currently no fix is available
- Kein Fix verfügbarSIPROTEC 5 7SK82 (CP100)siemens_psirt
Currently no fix is available
- Kein Fix verfügbarSIPROTEC 5 7SL82 (CP100)siemens_psirt
Currently no fix is available
- Kein Fix verfügbarSIPROTEC 5 7UT82 (CP100)siemens_psirt
Currently no fix is available
- Kein Fix verfügbarSIPROTEC 5 7SA82 (CP100)cisa_csaf_ot
Currently no fix is available
- Kein Fix verfügbarSIPROTEC 5 7SD82 (CP100)cisa_csaf_ot
Currently no fix is available
- Kein Fix verfügbarSIPROTEC 5 7SJ81 (CP100)cisa_csaf_ot
Currently no fix is available
- Kein Fix verfügbarSIPROTEC 5 7SJ82 (CP100)cisa_csaf_ot
Currently no fix is available
- Kein Fix verfügbarSIPROTEC 5 7SK82 (CP100)cisa_csaf_ot
Currently no fix is available
- Kein Fix verfügbarSIPROTEC 5 7SL82 (CP100)cisa_csaf_ot
Currently no fix is available
- Kein Fix verfügbarSIPROTEC 5 7UT82 (CP100)cisa_csaf_ot
Currently no fix is available
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · low–medium · 2.3–6
SSVC
Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
betroffene Produkte (283)
Betroffene Produkte und Versionsbereiche.
Advisories (4)
Hersteller- und Ökosystem-Meldungen dazu.
- NCSC-2025-0211Kwetsbaarheden verholpen in Siemens productenNL2025-07-08csaf · ncsc_nlNL
Siemens heeft kwetsbaarheden verholpen in diverse producten als SIMATIC, SINEC, SIPROTEC, Solid Edge en TIA,
- SSA-904646SSA-904646: Sensitive Data Exposure Vulnerability in SIPROTEC 5 Devices2025-07-08csaf · siemens_psirtDE
A sensitive data exposure vulnerability in SIPROTEC 5 can allow an attacker to retrieve sensitive session data from browser history, logs, or other storage mechanisms, potentially leading to unauthorized access. Siemens is preparing fix versions and recommends countermeasures for products where fixes are not, or not yet available.
- WID-SEC-W-2025-1478Siemens SIPROTEC: Schwachstelle ermöglicht Offenlegung von InformationenDeutsch2025-07-07csaf · cert_bundDE
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Siemens SIPROTEC ausnutzen, um Informationen offenzulegen.
- ICSA-25-191-06Siemens SIPROTEC 52025-07-08icsa · cisa_csaf_otUS
A sensitive data exposure vulnerability in SIPROTEC 5 can allow an attacker to retrieve sensitive session data from browser history, logs, or other storage mechanisms, potentially leading to unauthorized access. Siemens is preparing fix versions and recommends countermeasures for products where fixes are not, or not yet available.
auch bekannt als (5)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (4)
Externe Belege — Patches, Meldungen, Analysen.
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan