CVE-2024-34057

highpriority · track · 30EPSS 0.004 · 38 %ileDEEUNLUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

0.44% (38th) EPSS

CVSS 7.5 · high

Is it mine?

31 products

Check your exposure

Who says so?

6 sources

cnnvd · enisa_euvd · cert_bund · cisa_csaf_ot

EPSS · scored 2026-10-22

Triangle Microworks TMW IEC 61850 Client source code libraries before 12.2.0 lack a buffer size check when processing received messages. The resulting buffer overflow can cause a crash, resulting in a denial of service.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

FixedET85 Ethernet Interface IEC61850 Ed.2siemens_psirt
Update to V03.27 or later version The firmware ET85 V3.27 is present within “CP-8000/CP-8021/CP-8022 Package” V16.52
FixedETI5 Ethernet Int. 1x100TX IEC61850siemens_psirt
Update to V05.30 or later version The firmware ETI5 V5.30 is present within “CP-8031/CP-8050 Package” V5.30 https://support.industry.siemens.com/cs/ww/en/view/109804985/
FixedSICAM SCCsiemens_psirt
Update to V9.14 HF2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109745469/
FixedSITIPE ATsiemens_psirt
Update to V3.21 or later version
https://support.industry.siemens.com/cs/ww/en/view/109895930/
FixedET85 Ethernet Interface IEC61850 Ed.2cisa_csaf_ot
Update to V03.27 or later version The firmware ET85 V3.27 is present within “CP-8000/CP-8021/CP-8022 Package” V16.52
FixedETI5 Ethernet Int. 1x100TX IEC61850cisa_csaf_ot
Update to V05.30 or later version The firmware ETI5 V5.30 is present within “CP-8031/CP-8050 Package” V5.30 https://support.industry.siemens.com/cs/ww/en/view/109804985/
FixedSICAM SCCcisa_csaf_ot
Update to V9.14 HF2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109745469/
FixedSITIPE ATcisa_csaf_ot
Update to V3.21 or later version
https://support.industry.siemens.com/cs/ww/en/view/109895930/

cvss

Technical severity, 0–10. One row per scoring source.

8.2

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 6.9–8.2

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hprimary · NVD / NIST USexploitability 3.9 · impact 3.6

v3.18.2highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:Hsecondary · CISA US

v3.18.2highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:Hsecondary · ENISA EU

v3.18.2highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:Hsecondaryexploitability 3.9 · impact 4.2

v3.18.2highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:Hsecondary · Siemens ProductCERT DE

v3.16.9mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:Usecondary · CVSS-BT (t0sche)

v3.18.2highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:Hsecondary · NCSC-NL NL

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: none · Automatable: yes · Technical Impact: partialcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-120USprimaryCWE-120USCWE-120USCWE-120US

affected products (31)

Products and version ranges known to be affected.

Siemens SICAM 8 Software Solutionall versionscert_bundDEcpe:/h:siemens:sicam:8_software_solution
Siemens SICAM A8000 Deviceall versionscert_bundDEcpe:/h:siemens:sicam:a8000_device
Siemens SICAM EGS Deviceall versionscert_bundDEcpe:/h:siemens:sicam:egs_device
Siemens SICAM SCC <10.0all versionscert_bundDE
Siemens SICAM≤ SCC <10.0cert_bundDE
ET85 Ethernet Interface IEC61850 Ed.2all versionscisa_csaf_otUS
ETI5 Ethernet Int. 1x100TX IEC61850all versionscisa_csaf_otUS
SICAM SCCall versionscisa_csaf_otUS
SITIPE ATall versionscisa_csaf_otUS
Siemens ET85 Ethernet Interface IEC61850 Ed.2≤ vers:intdot/<03.27cisa_csaf_otUS
Siemens ETI5 Ethernet Int. 1x100TX IEC61850≤ vers:intdot/<05.30cisa_csaf_otUS
Siemens SICAM SCC< V9.14_HF2cisa_csaf_otUS
Siemens SITIPE AT≤ vers:intdot/<3.21cisa_csaf_otUS
n/a n/a≤ n/aenisa_euvdEU
eti5_ethernet_int._1x100tx_iec61850all versionsncsc_nlNLcpe:2.3:a:siemens:eti5_ethernet_int._1x100tx_iec61850:*:*:*:*:*:*:*:*
sicamall versionsncsc_nlNLcpe:2.3:h:siemens:sicam:egs_device:*:*:*:*:*:*:*
sicamall versionsncsc_nlNLcpe:2.3:h:siemens:sicam:8_software_solution:*:*:*:*:*:*:*
sicamall versionsncsc_nlNLcpe:2.3:h:siemens:sicam:a8000_device:*:*:*:*:*:*:*
sicam_sccall versionsncsc_nlNLcpe:2.3:a:siemens:sicam_scc:*:*:*:*:*:*:*:*
sicam_scc__10.0all versionsncsc_nlNLcpe:2.3:a:siemens:sicam_scc__10.0:*:*:*:*:*:*:*:*

showing 20 of 31

advisories (4)

Vendor and ecosystem advisories describing this.

NCSC-2024-0362Kwetsbaarheden verholpen in Siemens productenNL2024-09-10csaf · ncsc_nlNL
Siemens heeft kwetsbaarheden verholpen in diverse producten als Mendix, SICAM, SIMATIC, SINEMA, SINUMERIK en Tecnomatix.
SSA-673996SSA-673996: Buffer Overflow Vulnerability in Third-Party Component in SICAM and SITIPE Products2024-09-10csaf · siemens_psirtDE
Multiple SICAM products are affected by buffer overflow vulnerability in the IEC 61850 Client libraries from Triangle MicroWorks that could allow an unauthenticated remote attacker to create a denial of service condition by sending specially crafted MMS messages. Affected SICAM and SITIPE products: - SICAM A8000 Device firmware - ET85 for CP-8000/CP-8021/CP-8022 - ETI5 for CP-8031/CP-8050 - SICAM EGS Device firmware - ETI5 - SICAM S8000 - ETI5 - SICAM SCC - SITIPE AT Siemens has released new versions for the affected products and recommends to update to the latest versions.
WID-SEC-W-2024-2094Siemens SICAM Produkte: Schwachstelle ermöglicht Denial of ServiceDeutsch2024-09-09csaf · cert_bundDE
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Siemens SICAM Produkte ausnutzen, um einen Denial of Service Angriff durchzuführen.
ICSA-24-256-16Siemens Third-Party Component in SICAM and SITIPE Products2024-09-10icsa · cisa_csaf_otUS
Multiple SICAM products are affected by buffer overflow vulnerability in the IEC 61850 Client libraries from Triangle MicroWorks that could allow an unauthenticated remote attacker to create a denial of service condition by sending specially crafted MMS messages. Affected SICAM and SITIPE products: - SICAM A8000 Device firmware - ET85 for CP-8000/CP-8021/CP-8022 - ETI5 for CP-8031/CP-8050 - SICAM EGS Device firmware - ETI5 - SICAM S8000 - ETI5 - SICAM SCC - SITIPE AT Siemens has released new versions for the affected products and recommends to update to the latest versions.

also known as (3)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd cert_bund cisa_csaf_ot ncsc_nl siemens_psirt NVD CVE.org MITRE

published 2024-09-18modified 2026-06-17

related (5,658)

Related entries.

ID	severity	EPSS	exploitable	published
CVE-2025-43520US	medium5.5OT critical	0.43% (36th)	KEV	2025-12-12
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS So…
CVE-2025-20333US	—OT critical	71.2% (99th)	KEV	2025-09-25
A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an aut…
CVE-2025-39682US	critical9.8OT critical	2.88% (87th)	KEV	2025-09-05
In the Linux kernel, the following vulnerability has been resolved: tls: fix handling of zero-length records on the rx_list Each recvmsg() call must process either - only contig…
CVE-2025-31277US	—OT critical	1.66% (76th)	KEV	2025-07-30
The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Proc…
CVE-2025-24985US	—OT critical	3.89% (90th)	KEV	2025-03-11
Integer overflow or wraparound in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally.

+5653 more

references (7)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan