CVE-2025-40808

mediumPriorität · verfolgen · 0EPSS 0.002 · 8. PerzentilDEEUNLRUUS
grimoire priorityP3 · Track
Exploitable?
—
no known exploitation
Likely / severe?
0.19% (8th) EPSS
CVSS 6.1 · medium
Is it mine?
580 products
Prüfe deine Angriffsfläche
Who says so?
7 sources
cnnvd · enisa_euvd · fstec_bdu · cert_bund

EPSS · bewertet 2026-10-24

A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions), SIPROTEC 5 6MD85 (CP200) (All versions), SIPROTEC 5 6MD85 (CP300) (All versions), SIPROTEC 5 6MD86 (CP200) (All versions), SIPROTEC 5 6MD86 (CP300) (All versions), SIPROTEC 5 6MD89 (CP300) (All versions), SIPROTEC 5 6MU85 (CP300) (All versions), SIPROTEC 5 7KE85 (CP200) (All versions), SIPROTEC 5 7KE85 (CP300) (All versions), SIPROTEC 5 7SA82 (CP100) (All versions), SIPROTEC 5 7SA82 (CP150) (All versions), SIPROTEC 5 7SA86 (CP200) (All versions), SIPROTEC 5 7SA86 (CP300) (All versions), SIPROTEC 5 7SA87 (CP200) (All versions), SIPROTEC 5 7SA87 (CP300) (All versions), SIPROTEC 5 7SD82 (CP100) (All versions), SIPROTEC 5 7SD82 (CP150) (All versions), SIPROTEC 5 7SD86 (CP200) (All versions), SIPROTEC 5 7SD86 (CP300) (All versions), SIPROTEC 5 7SD87 (CP200) (All versions), SIPROTEC 5 7SD87 (CP300) (All versions), SIPROTEC 5 7SJ81 (CP100) (All versions), SIPROTEC 5 7SJ81 (CP150) (All versions), SIPROTEC 5 7SJ82 (CP100) (All versions), SIPROTEC 5 7SJ82 (CP150) (All versions), SIPROTEC 5 7SJ85 (CP200) (All versions), SIPROTEC 5 7SJ85 (CP300) (All versions), SIPROTEC 5 7SJ86 (CP200) (All versions), SIPROTEC 5 7SJ86 (CP300) (All versions), SIPROTEC 5 7SK82 (CP100) (All versions), SIPROTEC 5 7SK82 (CP150) (All versions), SIPROTEC 5 7SK85 (CP200) (All versions), SIPROTEC 5 7SK85 (CP300) (All versions), SIPROTEC 5 7SL82 (CP100) (All versions), SIPROTEC 5 7SL82 (CP150) (All versions), SIPROTEC 5 7SL86 (CP200) (All versions), SIPROTEC 5 7SL86 (CP300) (All versions), SIPROTEC 5 7SL87 (CP200) (All versions), SIPROTEC 5 7SL87 (CP300) (All versions), SIPROTEC 5 7SS85 (CP200) (All versions), SIPROTEC 5 7SS85 (CP300) (All versions), SIPROTEC 5 7ST85 (CP200) (All versions), SIPROTEC 5 7ST85 (CP300) (All versions), SIPROTEC 5 7ST86 (CP300) (All versions), SIPROTEC 5 7SX82 (CP150) (All versions), SIPROTEC 5 7SX85 (CP300) (All versions), SIPROTEC 5 7SY82 (CP150) (All versions), SIPROTEC 5 7UM85 (CP300) (All versions), SIPROTEC 5 7UT82 (CP100) (All versions), SIPROTEC 5 7UT82 (CP150) (All versions), SIPROTEC 5 7UT85 (CP200) (All versions), SIPROTEC 5 7UT85 (CP300) (All versions), SIPROTEC 5 7UT86 (CP200) (All versions), SIPROTEC 5 7UT86 (CP300) (All versions), SIPROTEC 5 7UT87 (CP200) (All versions), SIPROTEC 5 7UT87 (CP300) (All versions), SIPROTEC 5 7VE85 (CP300) (All versions), SIPROTEC 5 7VK87 (CP200) (All versions), SIPROTEC 5 7VK87 (CP300) (All versions), SIPROTEC 5 7VU85 (CP300) (All versions), SIPROTEC 5 Compact 7SX800 (CP050) (All versions). The affected application allows authenticated users to upload arbitrary files using DIGSI 5 protocol. This could allow an attacker to upload malicious configuration files, that could cause denial of service condition and potentially lead to code execution.

01

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Noch kein Hersteller-Fix; eine Mitigation ist verfügbar.

  • MitigationSIPROTEC 5 6MD84 (CP300)siemens_psirt

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 6MD85 (CP200)siemens_psirt

    Apply password protection to all DIGSI connections to ensure secure communication

  • MitigationSIPROTEC 5 6MD85 (CP300)siemens_psirt

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 6MD86 (CP200)siemens_psirt

    Apply password protection to all DIGSI connections to ensure secure communication

  • MitigationSIPROTEC 5 6MD86 (CP300)siemens_psirt

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 6MD89 (CP300)siemens_psirt

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 6MU85 (CP300)siemens_psirt

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 7KE85 (CP200)siemens_psirt

    Apply password protection to all DIGSI connections to ensure secure communication

  • MitigationSIPROTEC 5 7KE85 (CP300)siemens_psirt

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 7SA82 (CP100)siemens_psirt

    Apply password protection to all DIGSI connections to ensure secure communication

  • MitigationSIPROTEC 5 7SA82 (CP150)siemens_psirt

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 7SA86 (CP200)siemens_psirt

    Apply password protection to all DIGSI connections to ensure secure communication

  • MitigationSIPROTEC 5 7SA86 (CP300)siemens_psirt

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 7SA87 (CP200)siemens_psirt

    Apply password protection to all DIGSI connections to ensure secure communication

  • MitigationSIPROTEC 5 7SA87 (CP300)siemens_psirt

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 7SD82 (CP100)siemens_psirt

    Apply password protection to all DIGSI connections to ensure secure communication

  • MitigationSIPROTEC 5 7SD82 (CP150)siemens_psirt

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 7SD86 (CP200)siemens_psirt

    Apply password protection to all DIGSI connections to ensure secure communication

  • MitigationSIPROTEC 5 7SD86 (CP300)siemens_psirt

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 7SD87 (CP200)siemens_psirt

    Apply password protection to all DIGSI connections to ensure secure communication

  • MitigationSIPROTEC 5 7SD87 (CP300)siemens_psirt

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 7SJ81 (CP100)siemens_psirt

    Apply password protection to all DIGSI connections to ensure secure communication

  • MitigationSIPROTEC 5 7SJ81 (CP150)siemens_psirt

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 7SJ82 (CP100)siemens_psirt

    Apply password protection to all DIGSI connections to ensure secure communication

  • MitigationSIPROTEC 5 7SJ82 (CP150)siemens_psirt

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 7SJ85 (CP200)siemens_psirt

    Apply password protection to all DIGSI connections to ensure secure communication

  • MitigationSIPROTEC 5 7SJ85 (CP300)siemens_psirt

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 7SJ86 (CP200)siemens_psirt

    Apply password protection to all DIGSI connections to ensure secure communication

  • MitigationSIPROTEC 5 7SJ86 (CP300)siemens_psirt

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 7SK82 (CP100)siemens_psirt

    Apply password protection to all DIGSI connections to ensure secure communication

  • MitigationSIPROTEC 5 7SK82 (CP150)siemens_psirt

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 7SK85 (CP200)siemens_psirt

    Apply password protection to all DIGSI connections to ensure secure communication

  • MitigationSIPROTEC 5 7SK85 (CP300)siemens_psirt

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 7SL82 (CP100)siemens_psirt

    Apply password protection to all DIGSI connections to ensure secure communication

  • MitigationSIPROTEC 5 7SL82 (CP150)siemens_psirt

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 7SL86 (CP200)siemens_psirt

    Apply password protection to all DIGSI connections to ensure secure communication

  • MitigationSIPROTEC 5 7SL86 (CP300)siemens_psirt

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 7SL87 (CP200)siemens_psirt

    Apply password protection to all DIGSI connections to ensure secure communication

  • MitigationSIPROTEC 5 7SL87 (CP300)siemens_psirt

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 7SS85 (CP200)siemens_psirt

    Apply password protection to all DIGSI connections to ensure secure communication

  • MitigationSIPROTEC 5 7SS85 (CP300)siemens_psirt

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 7ST85 (CP200)siemens_psirt

    Apply password protection to all DIGSI connections to ensure secure communication

  • MitigationSIPROTEC 5 7ST85 (CP300)siemens_psirt

    Apply password protection to all DIGSI connections to ensure secure communication

  • MitigationSIPROTEC 5 7ST86 (CP300)siemens_psirt

    Apply password protection to all DIGSI connections to ensure secure communication

  • MitigationSIPROTEC 5 7SX82 (CP150)siemens_psirt

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 7SX85 (CP300)siemens_psirt

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 7SY82 (CP150)siemens_psirt

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 7UM85 (CP300)siemens_psirt

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 7UT82 (CP100)siemens_psirt

    Apply password protection to all DIGSI connections to ensure secure communication

  • MitigationSIPROTEC 5 7UT82 (CP150)siemens_psirt

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 7UT85 (CP200)siemens_psirt

    Apply password protection to all DIGSI connections to ensure secure communication

  • MitigationSIPROTEC 5 7UT85 (CP300)siemens_psirt

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 7UT86 (CP200)siemens_psirt

    Apply password protection to all DIGSI connections to ensure secure communication

  • MitigationSIPROTEC 5 7UT86 (CP300)siemens_psirt

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 7UT87 (CP200)siemens_psirt

    Apply password protection to all DIGSI connections to ensure secure communication

  • MitigationSIPROTEC 5 7UT87 (CP300)siemens_psirt

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 7VE85 (CP300)siemens_psirt

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 7VK87 (CP200)siemens_psirt

    Apply password protection to all DIGSI connections to ensure secure communication

  • MitigationSIPROTEC 5 7VK87 (CP300)siemens_psirt

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 7VU85 (CP300)siemens_psirt

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 Compact 7SX800 (CP050)siemens_psirt

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 6MD84 (CP300)cisa_csaf_ot

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 6MD85 (CP200)cisa_csaf_ot

    Apply password protection to all DIGSI connections to ensure secure communication

  • MitigationSIPROTEC 5 6MD85 (CP300)cisa_csaf_ot

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 6MD86 (CP200)cisa_csaf_ot

    Apply password protection to all DIGSI connections to ensure secure communication

  • MitigationSIPROTEC 5 6MD86 (CP300)cisa_csaf_ot

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 6MD89 (CP300)cisa_csaf_ot

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 6MU85 (CP300)cisa_csaf_ot

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 7KE85 (CP200)cisa_csaf_ot

    Apply password protection to all DIGSI connections to ensure secure communication

  • MitigationSIPROTEC 5 7KE85 (CP300)cisa_csaf_ot

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 7SA82 (CP100)cisa_csaf_ot

    Apply password protection to all DIGSI connections to ensure secure communication

  • MitigationSIPROTEC 5 7SA82 (CP150)cisa_csaf_ot

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 7SA86 (CP200)cisa_csaf_ot

    Apply password protection to all DIGSI connections to ensure secure communication

  • MitigationSIPROTEC 5 7SA86 (CP300)cisa_csaf_ot

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 7SA87 (CP200)cisa_csaf_ot

    Apply password protection to all DIGSI connections to ensure secure communication

  • MitigationSIPROTEC 5 7SA87 (CP300)cisa_csaf_ot

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 7SD82 (CP100)cisa_csaf_ot

    Apply password protection to all DIGSI connections to ensure secure communication

  • MitigationSIPROTEC 5 7SD82 (CP150)cisa_csaf_ot

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 7SD86 (CP200)cisa_csaf_ot

    Apply password protection to all DIGSI connections to ensure secure communication

  • MitigationSIPROTEC 5 7SD86 (CP300)cisa_csaf_ot

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 7SD87 (CP200)cisa_csaf_ot

    Apply password protection to all DIGSI connections to ensure secure communication

  • MitigationSIPROTEC 5 7SD87 (CP300)cisa_csaf_ot

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 7SJ81 (CP100)cisa_csaf_ot

    Apply password protection to all DIGSI connections to ensure secure communication

  • MitigationSIPROTEC 5 7SJ81 (CP150)cisa_csaf_ot

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 7SJ82 (CP100)cisa_csaf_ot

    Apply password protection to all DIGSI connections to ensure secure communication

  • MitigationSIPROTEC 5 7SJ82 (CP150)cisa_csaf_ot

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 7SJ85 (CP200)cisa_csaf_ot

    Apply password protection to all DIGSI connections to ensure secure communication

  • MitigationSIPROTEC 5 7SJ85 (CP300)cisa_csaf_ot

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 7SJ86 (CP200)cisa_csaf_ot

    Apply password protection to all DIGSI connections to ensure secure communication

  • MitigationSIPROTEC 5 7SJ86 (CP300)cisa_csaf_ot

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 7SK82 (CP100)cisa_csaf_ot

    Apply password protection to all DIGSI connections to ensure secure communication

  • MitigationSIPROTEC 5 7SK82 (CP150)cisa_csaf_ot

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 7SK85 (CP200)cisa_csaf_ot

    Apply password protection to all DIGSI connections to ensure secure communication

  • MitigationSIPROTEC 5 7SK85 (CP300)cisa_csaf_ot

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 7SL82 (CP100)cisa_csaf_ot

    Apply password protection to all DIGSI connections to ensure secure communication

  • MitigationSIPROTEC 5 7SL82 (CP150)cisa_csaf_ot

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 7SL86 (CP200)cisa_csaf_ot

    Apply password protection to all DIGSI connections to ensure secure communication

  • MitigationSIPROTEC 5 7SL86 (CP300)cisa_csaf_ot

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 7SL87 (CP200)cisa_csaf_ot

    Apply password protection to all DIGSI connections to ensure secure communication

  • MitigationSIPROTEC 5 7SL87 (CP300)cisa_csaf_ot

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 7SS85 (CP200)cisa_csaf_ot

    Apply password protection to all DIGSI connections to ensure secure communication

  • MitigationSIPROTEC 5 7SS85 (CP300)cisa_csaf_ot

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 7ST85 (CP200)cisa_csaf_ot

    Apply password protection to all DIGSI connections to ensure secure communication

  • MitigationSIPROTEC 5 7ST85 (CP300)cisa_csaf_ot

    Apply password protection to all DIGSI connections to ensure secure communication

  • MitigationSIPROTEC 5 7ST86 (CP300)cisa_csaf_ot

    Apply password protection to all DIGSI connections to ensure secure communication

  • MitigationSIPROTEC 5 7SX82 (CP150)cisa_csaf_ot

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 7SX85 (CP300)cisa_csaf_ot

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 7SY82 (CP150)cisa_csaf_ot

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 7UM85 (CP300)cisa_csaf_ot

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 7UT82 (CP100)cisa_csaf_ot

    Apply password protection to all DIGSI connections to ensure secure communication

  • MitigationSIPROTEC 5 7UT82 (CP150)cisa_csaf_ot

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 7UT85 (CP200)cisa_csaf_ot

    Apply password protection to all DIGSI connections to ensure secure communication

  • MitigationSIPROTEC 5 7UT85 (CP300)cisa_csaf_ot

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 7UT86 (CP200)cisa_csaf_ot

    Apply password protection to all DIGSI connections to ensure secure communication

  • MitigationSIPROTEC 5 7UT86 (CP300)cisa_csaf_ot

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 7UT87 (CP200)cisa_csaf_ot

    Apply password protection to all DIGSI connections to ensure secure communication

  • MitigationSIPROTEC 5 7UT87 (CP300)cisa_csaf_ot

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 7VE85 (CP300)cisa_csaf_ot

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 7VK87 (CP200)cisa_csaf_ot

    Apply password protection to all DIGSI connections to ensure secure communication

  • MitigationSIPROTEC 5 7VK87 (CP300)cisa_csaf_ot

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 7VU85 (CP300)cisa_csaf_ot

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • MitigationSIPROTEC 5 Compact 7SX800 (CP050)cisa_csaf_ot

    <br> Users are advised to upgrade to V9.90 or later, which introduces an allow-list feature that restricts arbitrary file uploads

  • Kein Fix verfügbarSIPROTEC 5 6MD84 (CP300)siemens_psirt

    Currently no fix is available

  • Kein Fix verfügbarSIPROTEC 5 6MD85 (CP300)siemens_psirt

    Currently no fix is available

  • Kein Fix verfügbarSIPROTEC 5 6MD86 (CP300)siemens_psirt

    Currently no fix is available

  • Kein Fix verfügbarSIPROTEC 5 6MD89 (CP300)siemens_psirt

    Currently no fix is available

  • Kein Fix verfügbarSIPROTEC 5 6MU85 (CP300)siemens_psirt

    Currently no fix is available

  • Kein Fix verfügbarSIPROTEC 5 7KE85 (CP300)siemens_psirt

    Currently no fix is available

  • Kein Fix verfügbarSIPROTEC 5 7SA82 (CP150)siemens_psirt

    Currently no fix is available

  • Kein Fix verfügbarSIPROTEC 5 7SA86 (CP300)siemens_psirt

    Currently no fix is available

  • Kein Fix verfügbarSIPROTEC 5 7SA87 (CP300)siemens_psirt

    Currently no fix is available

  • Kein Fix verfügbarSIPROTEC 5 7SD82 (CP150)siemens_psirt

    Currently no fix is available

  • Kein Fix verfügbarSIPROTEC 5 7SD86 (CP300)siemens_psirt

    Currently no fix is available

  • Kein Fix verfügbarSIPROTEC 5 7SD87 (CP300)siemens_psirt

    Currently no fix is available

  • Kein Fix verfügbarSIPROTEC 5 7SJ81 (CP150)siemens_psirt

    Currently no fix is available

  • Kein Fix verfügbarSIPROTEC 5 7SJ82 (CP150)siemens_psirt

    Currently no fix is available

  • Kein Fix verfügbarSIPROTEC 5 7SJ85 (CP300)siemens_psirt

    Currently no fix is available

  • Kein Fix verfügbarSIPROTEC 5 7SJ86 (CP300)siemens_psirt

    Currently no fix is available

  • Kein Fix verfügbarSIPROTEC 5 7SK82 (CP150)siemens_psirt

    Currently no fix is available

  • Kein Fix verfügbarSIPROTEC 5 7SK85 (CP300)siemens_psirt

    Currently no fix is available

  • Kein Fix verfügbarSIPROTEC 5 7SL82 (CP150)siemens_psirt

    Currently no fix is available

  • Kein Fix verfügbarSIPROTEC 5 7SL86 (CP300)siemens_psirt

    Currently no fix is available

  • Kein Fix verfügbarSIPROTEC 5 7SL87 (CP300)siemens_psirt

    Currently no fix is available

  • Kein Fix verfügbarSIPROTEC 5 7SS85 (CP300)siemens_psirt

    Currently no fix is available

  • Kein Fix verfügbarSIPROTEC 5 7ST85 (CP300)siemens_psirt

    Currently no fix is available

  • Kein Fix verfügbarSIPROTEC 5 7ST86 (CP300)siemens_psirt

    Currently no fix is available

  • Kein Fix verfügbarSIPROTEC 5 7SX82 (CP150)siemens_psirt

    Currently no fix is available

  • Kein Fix verfügbarSIPROTEC 5 7SX85 (CP300)siemens_psirt

    Currently no fix is available

  • Kein Fix verfügbarSIPROTEC 5 7SY82 (CP150)siemens_psirt

    Currently no fix is available

  • Kein Fix verfügbarSIPROTEC 5 7UM85 (CP300)siemens_psirt

    Currently no fix is available

  • Kein Fix verfügbarSIPROTEC 5 7UT82 (CP150)siemens_psirt

    Currently no fix is available

  • Kein Fix verfügbarSIPROTEC 5 7UT85 (CP300)siemens_psirt

    Currently no fix is available

  • Kein Fix verfügbarSIPROTEC 5 7UT86 (CP300)siemens_psirt

    Currently no fix is available

  • Kein Fix verfügbarSIPROTEC 5 7UT87 (CP300)siemens_psirt

    Currently no fix is available

  • Kein Fix verfügbarSIPROTEC 5 7VE85 (CP300)siemens_psirt

    Currently no fix is available

  • Kein Fix verfügbarSIPROTEC 5 7VK87 (CP300)siemens_psirt

    Currently no fix is available

  • Kein Fix verfügbarSIPROTEC 5 7VU85 (CP300)siemens_psirt

    Currently no fix is available

  • Kein Fix verfügbarSIPROTEC 5 Compact 7SX800 (CP050)siemens_psirt

    Currently no fix is available

  • Kein Fix verfügbarSIPROTEC 5 6MD84 (CP300)cisa_csaf_ot

    Currently no fix is available

  • Kein Fix verfügbarSIPROTEC 5 6MD85 (CP300)cisa_csaf_ot

    Currently no fix is available

  • Kein Fix verfügbarSIPROTEC 5 6MD86 (CP300)cisa_csaf_ot

    Currently no fix is available

  • Kein Fix verfügbarSIPROTEC 5 6MD89 (CP300)cisa_csaf_ot

    Currently no fix is available

  • Kein Fix verfügbarSIPROTEC 5 6MU85 (CP300)cisa_csaf_ot

    Currently no fix is available

  • Kein Fix verfügbarSIPROTEC 5 7KE85 (CP300)cisa_csaf_ot

    Currently no fix is available

  • Kein Fix verfügbarSIPROTEC 5 7SA82 (CP150)cisa_csaf_ot

    Currently no fix is available

  • Kein Fix verfügbarSIPROTEC 5 7SA86 (CP300)cisa_csaf_ot

    Currently no fix is available

  • Kein Fix verfügbarSIPROTEC 5 7SA87 (CP300)cisa_csaf_ot

    Currently no fix is available

  • Kein Fix verfügbarSIPROTEC 5 7SD82 (CP150)cisa_csaf_ot

    Currently no fix is available

  • Kein Fix verfügbarSIPROTEC 5 7SD86 (CP300)cisa_csaf_ot

    Currently no fix is available

  • Kein Fix verfügbarSIPROTEC 5 7SD87 (CP300)cisa_csaf_ot

    Currently no fix is available

  • Kein Fix verfügbarSIPROTEC 5 7SJ81 (CP150)cisa_csaf_ot

    Currently no fix is available

  • Kein Fix verfügbarSIPROTEC 5 7SJ82 (CP150)cisa_csaf_ot

    Currently no fix is available

  • Kein Fix verfügbarSIPROTEC 5 7SJ85 (CP300)cisa_csaf_ot

    Currently no fix is available

  • Kein Fix verfügbarSIPROTEC 5 7SJ86 (CP300)cisa_csaf_ot

    Currently no fix is available

  • Kein Fix verfügbarSIPROTEC 5 7SK82 (CP150)cisa_csaf_ot

    Currently no fix is available

  • Kein Fix verfügbarSIPROTEC 5 7SK85 (CP300)cisa_csaf_ot

    Currently no fix is available

  • Kein Fix verfügbarSIPROTEC 5 7SL82 (CP150)cisa_csaf_ot

    Currently no fix is available

  • Kein Fix verfügbarSIPROTEC 5 7SL86 (CP300)cisa_csaf_ot

    Currently no fix is available

  • Kein Fix verfügbarSIPROTEC 5 7SL87 (CP300)cisa_csaf_ot

    Currently no fix is available

  • Kein Fix verfügbarSIPROTEC 5 7SS85 (CP300)cisa_csaf_ot

    Currently no fix is available

  • Kein Fix verfügbarSIPROTEC 5 7ST85 (CP300)cisa_csaf_ot

    Currently no fix is available

  • Kein Fix verfügbarSIPROTEC 5 7ST86 (CP300)cisa_csaf_ot

    Currently no fix is available

  • Kein Fix verfügbarSIPROTEC 5 7SX82 (CP150)cisa_csaf_ot

    Currently no fix is available

  • Kein Fix verfügbarSIPROTEC 5 7SX85 (CP300)cisa_csaf_ot

    Currently no fix is available

  • Kein Fix verfügbarSIPROTEC 5 7SY82 (CP150)cisa_csaf_ot

    Currently no fix is available

  • Kein Fix verfügbarSIPROTEC 5 7UM85 (CP300)cisa_csaf_ot

    Currently no fix is available

  • Kein Fix verfügbarSIPROTEC 5 7UT82 (CP150)cisa_csaf_ot

    Currently no fix is available

  • Kein Fix verfügbarSIPROTEC 5 7UT85 (CP300)cisa_csaf_ot

    Currently no fix is available

  • Kein Fix verfügbarSIPROTEC 5 7UT86 (CP300)cisa_csaf_ot

    Currently no fix is available

  • Kein Fix verfügbarSIPROTEC 5 7UT87 (CP300)cisa_csaf_ot

    Currently no fix is available

  • Kein Fix verfügbarSIPROTEC 5 7VE85 (CP300)cisa_csaf_ot

    Currently no fix is available

  • Kein Fix verfügbarSIPROTEC 5 7VK87 (CP300)cisa_csaf_ot

    Currently no fix is available

  • Kein Fix verfügbarSIPROTEC 5 7VU85 (CP300)cisa_csaf_ot

    Currently no fix is available

  • Kein Fix verfügbarSIPROTEC 5 Compact 7SX800 (CP050)cisa_csaf_ot

    Currently no fix is available

  • Kein Fix geplantSIPROTEC 5 6MD85 (CP200)siemens_psirt

    Currently no fix is planned

  • Kein Fix geplantSIPROTEC 5 6MD86 (CP200)siemens_psirt

    Currently no fix is planned

  • Kein Fix geplantSIPROTEC 5 7KE85 (CP200)siemens_psirt

    Currently no fix is planned

  • Kein Fix geplantSIPROTEC 5 7SA82 (CP100)siemens_psirt

    Currently no fix is planned

  • Kein Fix geplantSIPROTEC 5 7SA86 (CP200)siemens_psirt

    Currently no fix is planned

  • Kein Fix geplantSIPROTEC 5 7SA87 (CP200)siemens_psirt

    Currently no fix is planned

  • Kein Fix geplantSIPROTEC 5 7SD82 (CP100)siemens_psirt

    Currently no fix is planned

  • Kein Fix geplantSIPROTEC 5 7SD86 (CP200)siemens_psirt

    Currently no fix is planned

  • Kein Fix geplantSIPROTEC 5 7SD87 (CP200)siemens_psirt

    Currently no fix is planned

  • Kein Fix geplantSIPROTEC 5 7SJ81 (CP100)siemens_psirt

    Currently no fix is planned

  • Kein Fix geplantSIPROTEC 5 7SJ82 (CP100)siemens_psirt

    Currently no fix is planned

  • Kein Fix geplantSIPROTEC 5 7SJ85 (CP200)siemens_psirt

    Currently no fix is planned

  • Kein Fix geplantSIPROTEC 5 7SJ86 (CP200)siemens_psirt

    Currently no fix is planned

  • Kein Fix geplantSIPROTEC 5 7SK82 (CP100)siemens_psirt

    Currently no fix is planned

  • Kein Fix geplantSIPROTEC 5 7SK85 (CP200)siemens_psirt

    Currently no fix is planned

  • Kein Fix geplantSIPROTEC 5 7SL82 (CP100)siemens_psirt

    Currently no fix is planned

  • Kein Fix geplantSIPROTEC 5 7SL86 (CP200)siemens_psirt

    Currently no fix is planned

  • Kein Fix geplantSIPROTEC 5 7SL87 (CP200)siemens_psirt

    Currently no fix is planned

  • Kein Fix geplantSIPROTEC 5 7SS85 (CP200)siemens_psirt

    Currently no fix is planned

  • Kein Fix geplantSIPROTEC 5 7ST85 (CP200)siemens_psirt

    Currently no fix is planned

  • Kein Fix geplantSIPROTEC 5 7UT82 (CP100)siemens_psirt

    Currently no fix is planned

  • Kein Fix geplantSIPROTEC 5 7UT85 (CP200)siemens_psirt

    Currently no fix is planned

  • Kein Fix geplantSIPROTEC 5 7UT86 (CP200)siemens_psirt

    Currently no fix is planned

  • Kein Fix geplantSIPROTEC 5 7UT87 (CP200)siemens_psirt

    Currently no fix is planned

  • Kein Fix geplantSIPROTEC 5 7VK87 (CP200)siemens_psirt

    Currently no fix is planned

  • Kein Fix geplantSIPROTEC 5 6MD85 (CP200)cisa_csaf_ot

    Currently no fix is planned

  • Kein Fix geplantSIPROTEC 5 6MD86 (CP200)cisa_csaf_ot

    Currently no fix is planned

  • Kein Fix geplantSIPROTEC 5 7KE85 (CP200)cisa_csaf_ot

    Currently no fix is planned

  • Kein Fix geplantSIPROTEC 5 7SA82 (CP100)cisa_csaf_ot

    Currently no fix is planned

  • Kein Fix geplantSIPROTEC 5 7SA86 (CP200)cisa_csaf_ot

    Currently no fix is planned

  • Kein Fix geplantSIPROTEC 5 7SA87 (CP200)cisa_csaf_ot

    Currently no fix is planned

  • Kein Fix geplantSIPROTEC 5 7SD82 (CP100)cisa_csaf_ot

    Currently no fix is planned

  • Kein Fix geplantSIPROTEC 5 7SD86 (CP200)cisa_csaf_ot

    Currently no fix is planned

  • Kein Fix geplantSIPROTEC 5 7SD87 (CP200)cisa_csaf_ot

    Currently no fix is planned

  • Kein Fix geplantSIPROTEC 5 7SJ81 (CP100)cisa_csaf_ot

    Currently no fix is planned

  • Kein Fix geplantSIPROTEC 5 7SJ82 (CP100)cisa_csaf_ot

    Currently no fix is planned

  • Kein Fix geplantSIPROTEC 5 7SJ85 (CP200)cisa_csaf_ot

    Currently no fix is planned

  • Kein Fix geplantSIPROTEC 5 7SJ86 (CP200)cisa_csaf_ot

    Currently no fix is planned

  • Kein Fix geplantSIPROTEC 5 7SK82 (CP100)cisa_csaf_ot

    Currently no fix is planned

  • Kein Fix geplantSIPROTEC 5 7SK85 (CP200)cisa_csaf_ot

    Currently no fix is planned

  • Kein Fix geplantSIPROTEC 5 7SL82 (CP100)cisa_csaf_ot

    Currently no fix is planned

  • Kein Fix geplantSIPROTEC 5 7SL86 (CP200)cisa_csaf_ot

    Currently no fix is planned

  • Kein Fix geplantSIPROTEC 5 7SL87 (CP200)cisa_csaf_ot

    Currently no fix is planned

  • Kein Fix geplantSIPROTEC 5 7SS85 (CP200)cisa_csaf_ot

    Currently no fix is planned

  • Kein Fix geplantSIPROTEC 5 7ST85 (CP200)cisa_csaf_ot

    Currently no fix is planned

  • Kein Fix geplantSIPROTEC 5 7UT82 (CP100)cisa_csaf_ot

    Currently no fix is planned

  • Kein Fix geplantSIPROTEC 5 7UT85 (CP200)cisa_csaf_ot

    Currently no fix is planned

  • Kein Fix geplantSIPROTEC 5 7UT86 (CP200)cisa_csaf_ot

    Currently no fix is planned

  • Kein Fix geplantSIPROTEC 5 7UT87 (CP200)cisa_csaf_ot

    Currently no fix is planned

  • Kein Fix geplantSIPROTEC 5 7VK87 (CP200)cisa_csaf_ot

    Currently no fix is planned

02

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

6.9
010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen

v3.16.1mediumCVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:Hsecondary · NCSC-NL NL
v3.16.1mediumAV:A/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:Hsecondary · FSTEC (BDU) RU
v3.16.1mediumCVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:Hsecondary · productcert@siemens.com DEAusnutzbarkeit 0.9 · Auswirkung 5.2
v3.16.1mediumCVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:Hsecondary · Siemens ProductCERT DE
v3.16.1mediumCVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:Hsecondary · CISA US
v4.06.9mediumCVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:Nsecondary · ENISA EU
v4.06.9mediumCVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · productcert@siemens.com DE
v4.04.5mediumCVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · CVSS-BT (t0sche)
03

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-434USCWE-434USCWE-434USCWE-434USCWE-434US
04

betroffene Produkte (580)

Betroffene Produkte und Versionsbereiche.

20 von 580 angezeigt
05

Advisories (4)

Hersteller- und Ökosystem-Meldungen dazu.

  • NCSC-2026-0187Kwetsbaarheden verholpen in Siemens productenNL2026-06-09csaf · ncsc_nlNL

    Siemens heeft kwetsbaarheden verholpen in diverse producten als SCALANCE, SIMATIC, SINAMICS, SIPROTEC en TIA Portal.

  • SSA-139483SSA-139483: File Upload Vulnerability in SIPROTEC 5 Using DIGSI5 Protocol2026-06-09csaf · siemens_psirtDE

    SIPROTEC 5 is vulnerable to arbitrary file uploads by authenticated users using the DIGSI 5 protocol. This could allow an attacker to upload malicious configuration files, potentially causing a permanent denial of service condition. As a mitigation measure, users of the CP050 and CP150 device models are advised to upgrade to version 9.90 or later. For CP300 device models, devices 7ST85 and 7ST86 are advised to upgrade to version 10.00 or later, while the remaining models should upgrade to version 9.90 or later. These versions introduce an allow-list feature that restricts arbitrary file uploads and reduces the risk associated with this vulnerability. Siemens is preparing fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.

  • WID-SEC-W-2026-1825Siemens SIPROTEC: Schwachstelle ermöglicht Manipulation von DateienDeutsch2026-06-08csaf · cert_bundDE

    Ein Angreifer aus einem angrenzenden Netzwerk kann eine Schwachstelle in Siemens SIPROTEC ausnutzen, um Dateien zu manipulieren.

  • ICSA-26-174-02Siemens SIPROTEC 5 Using DIGSI5 Protocol2026-06-09icsa · cisa_csaf_otUS

    SIPROTEC 5 is vulnerable to arbitrary file uploads by authenticated users using the DIGSI 5 protocol. This could allow an attacker to upload malicious configuration files, potentially causing a permanent denial of service condition. As a mitigation measure, users of the CP050 and CP150 device models are advised to upgrade to version 9.90 or later. For CP300 device models, devices 7ST85 and 7ST86 are advised to upgrade to version 10.00 or later, while the remaining models should upgrade to version 9.90 or later. These versions introduce an allow-list feature that restricts arbitrary file uploads and reduces the risk associated with this vulnerability. Siemens is preparing fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.

06

auch bekannt als (4)

Weitere Namen und Kennungen dieser Entität.

07

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvdenisa_euvdfstec_bducert_bundcisa_csaf_otncsc_nlsiemens_psirtNVDCVE.orgMITRE
veröffentlicht 2026-06-09geändert 2026-07-23
08

Referenzen (5)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan