CVE-2024-52504

highpriority · track · 0EPSS 0.004 · 38 %ileDEEUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

0.44% (38th) EPSS

CVSS 7.5 · high

Is it mine?

118 products

Check your exposure

Who says so?

5 sources

cnnvd · enisa_euvd · cert_bund · cisa_csaf_ot

EPSS · scored 2026-10-27

A vulnerability has been identified in SIPROTEC 4 6MD61 (All versions), SIPROTEC 4 6MD63 (All versions), SIPROTEC 4 6MD66 (All versions), SIPROTEC 4 6MD665 (All versions), SIPROTEC 4 7SA522 (All versions), SIPROTEC 4 7SA6 (All versions < V4.78), SIPROTEC 4 7SD5 (All versions < V4.78), SIPROTEC 4 7SD610 (All versions < V4.78), SIPROTEC 4 7SJ61 (All versions), SIPROTEC 4 7SJ62 (All versions), SIPROTEC 4 7SJ63 (All versions), SIPROTEC 4 7SJ64 (All versions), SIPROTEC 4 7SJ66 (All versions), SIPROTEC 4 7SS52 (All versions), SIPROTEC 4 7ST6 (All versions), SIPROTEC 4 7UM61 (All versions), SIPROTEC 4 7UM62 (All versions), SIPROTEC 4 7UT612 (All versions), SIPROTEC 4 7UT613 (All versions), SIPROTEC 4 7UT63 (All versions), SIPROTEC 4 7VE6 (All versions), SIPROTEC 4 7VK61 (All versions), SIPROTEC 4 7VU683 (All versions), SIPROTEC 4 Compact 7RW80 (All versions), SIPROTEC 4 Compact 7SD80 (All versions), SIPROTEC 4 Compact 7SJ80 (All versions), SIPROTEC 4 Compact 7SJ81 (All versions), SIPROTEC 4 Compact 7SK80 (All versions), SIPROTEC 4 Compact 7SK81 (All versions). Affected devices do not properly handle interrupted operations of file transfer. This could allow an unauthenticated remote attacker to cause a denial of service condition. To restore normal operations, the devices need to be restarted.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

FixedSIPROTEC 4 7SA6siemens_psirt
Update to V4.78 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743560/
FixedSIPROTEC 4 7SD5siemens_psirt
Update to V4.78 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743563/
FixedSIPROTEC 4 7SD610siemens_psirt
Update to V4.78 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743573/
FixedSIPROTEC 4 7SA6cisa_csaf_ot
Update to V4.78 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743560/
FixedSIPROTEC 4 7SD5cisa_csaf_ot
Update to V4.78 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743563/
FixedSIPROTEC 4 7SD610cisa_csaf_ot
Update to V4.78 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743573/
No fix availableSIPROTEC 4 7SJ66siemens_psirt
Currently no fix is available
No fix availableSIPROTEC 4 7SJ66cisa_csaf_ot
Currently no fix is available
No fix plannedSIPROTEC 4 6MD61siemens_psirt
Currently no fix is planned
No fix plannedSIPROTEC 4 6MD63siemens_psirt
Currently no fix is planned
No fix plannedSIPROTEC 4 6MD66siemens_psirt
Currently no fix is planned
No fix plannedSIPROTEC 4 6MD665siemens_psirt
Currently no fix is planned
No fix plannedSIPROTEC 4 7SA522siemens_psirt
Currently no fix is planned
No fix plannedSIPROTEC 4 7SJ61siemens_psirt
Currently no fix is planned
No fix plannedSIPROTEC 4 7SJ62siemens_psirt
Currently no fix is planned
No fix plannedSIPROTEC 4 7SJ63siemens_psirt
Currently no fix is planned
No fix plannedSIPROTEC 4 7SJ64siemens_psirt
Currently no fix is planned
No fix plannedSIPROTEC 4 7SS52siemens_psirt
Currently no fix is planned
No fix plannedSIPROTEC 4 7ST6siemens_psirt
Currently no fix is planned
No fix plannedSIPROTEC 4 7UM61siemens_psirt
Currently no fix is planned
No fix plannedSIPROTEC 4 7UM62siemens_psirt
Currently no fix is planned
No fix plannedSIPROTEC 4 7UT612siemens_psirt
Currently no fix is planned
No fix plannedSIPROTEC 4 7UT613siemens_psirt
Currently no fix is planned
No fix plannedSIPROTEC 4 7UT63siemens_psirt
Currently no fix is planned
No fix plannedSIPROTEC 4 7VE6siemens_psirt
Currently no fix is planned
No fix plannedSIPROTEC 4 7VK61siemens_psirt
Currently no fix is planned
No fix plannedSIPROTEC 4 7VU683siemens_psirt
Currently no fix is planned
No fix plannedSIPROTEC 4 Compact 7RW80siemens_psirt
Currently no fix is planned
No fix plannedSIPROTEC 4 Compact 7SD80siemens_psirt
Currently no fix is planned
No fix plannedSIPROTEC 4 Compact 7SJ80siemens_psirt
Currently no fix is planned
No fix plannedSIPROTEC 4 Compact 7SJ81siemens_psirt
Currently no fix is planned
No fix plannedSIPROTEC 4 Compact 7SK80siemens_psirt
Currently no fix is planned
No fix plannedSIPROTEC 4 Compact 7SK81siemens_psirt
Currently no fix is planned
No fix plannedSIPROTEC 4 6MD61cisa_csaf_ot
Currently no fix is planned
No fix plannedSIPROTEC 4 6MD63cisa_csaf_ot
Currently no fix is planned
No fix plannedSIPROTEC 4 6MD66cisa_csaf_ot
Currently no fix is planned
No fix plannedSIPROTEC 4 6MD665cisa_csaf_ot
Currently no fix is planned
No fix plannedSIPROTEC 4 7SA522cisa_csaf_ot
Currently no fix is planned
No fix plannedSIPROTEC 4 7SJ61cisa_csaf_ot
Currently no fix is planned
No fix plannedSIPROTEC 4 7SJ62cisa_csaf_ot
Currently no fix is planned
No fix plannedSIPROTEC 4 7SJ63cisa_csaf_ot
Currently no fix is planned
No fix plannedSIPROTEC 4 7SJ64cisa_csaf_ot
Currently no fix is planned
No fix plannedSIPROTEC 4 7SS52cisa_csaf_ot
Currently no fix is planned
No fix plannedSIPROTEC 4 7ST6cisa_csaf_ot
Currently no fix is planned
No fix plannedSIPROTEC 4 7UM61cisa_csaf_ot
Currently no fix is planned
No fix plannedSIPROTEC 4 7UM62cisa_csaf_ot
Currently no fix is planned
No fix plannedSIPROTEC 4 7UT612cisa_csaf_ot
Currently no fix is planned
No fix plannedSIPROTEC 4 7UT613cisa_csaf_ot
Currently no fix is planned
No fix plannedSIPROTEC 4 7UT63cisa_csaf_ot
Currently no fix is planned
No fix plannedSIPROTEC 4 7VE6cisa_csaf_ot
Currently no fix is planned
No fix plannedSIPROTEC 4 7VK61cisa_csaf_ot
Currently no fix is planned
No fix plannedSIPROTEC 4 7VU683cisa_csaf_ot
Currently no fix is planned
No fix plannedSIPROTEC 4 Compact 7RW80cisa_csaf_ot
Currently no fix is planned
No fix plannedSIPROTEC 4 Compact 7SD80cisa_csaf_ot
Currently no fix is planned
No fix plannedSIPROTEC 4 Compact 7SJ80cisa_csaf_ot
Currently no fix is planned
No fix plannedSIPROTEC 4 Compact 7SJ81cisa_csaf_ot
Currently no fix is planned
No fix plannedSIPROTEC 4 Compact 7SK80cisa_csaf_ot
Currently no fix is planned
No fix plannedSIPROTEC 4 Compact 7SK81cisa_csaf_ot
Currently no fix is planned

cvss

Technical severity, 0–10. One row per scoring source.

8.7

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 6.6–8.7

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · CISA US

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · productcert@siemens.com DEexploitability 3.9 · impact 3.6

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · Siemens ProductCERT DE

v4.08.7highCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:Nsecondary · ENISA EU

v4.08.7highCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · productcert@siemens.com DE

v4.06.6mediumCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · CVSS-BT (t0sche)

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: none · Automatable: yes · Technical Impact: partialcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-754USCWE-754USCWE-754US

affected products (118)

Products and version ranges known to be affected.

Siemens SIPROTEC 4 <V4.78all versionscert_bundDE
Siemens SIPROTEC≤ 4 <V4.78cert_bundDE
SIPROTEC 4 6MD61all versionscisa_csaf_otUS
SIPROTEC 4 6MD63all versionscisa_csaf_otUS
SIPROTEC 4 6MD66all versionscisa_csaf_otUS
SIPROTEC 4 6MD665all versionscisa_csaf_otUS
SIPROTEC 4 7SA522all versionscisa_csaf_otUS
SIPROTEC 4 7SA6all versionscisa_csaf_otUS
SIPROTEC 4 7SD5all versionscisa_csaf_otUS
SIPROTEC 4 7SD610all versionscisa_csaf_otUS
SIPROTEC 4 7SJ61all versionscisa_csaf_otUS
SIPROTEC 4 7SJ62all versionscisa_csaf_otUS
SIPROTEC 4 7SJ63all versionscisa_csaf_otUS
SIPROTEC 4 7SJ64all versionscisa_csaf_otUS
SIPROTEC 4 7SJ66all versionscisa_csaf_otUS
SIPROTEC 4 7SS52all versionscisa_csaf_otUS
SIPROTEC 4 7ST6all versionscisa_csaf_otUS
SIPROTEC 4 7UM61all versionscisa_csaf_otUS
SIPROTEC 4 7UM62all versionscisa_csaf_otUS
SIPROTEC 4 7UT612all versionscisa_csaf_otUS

showing 20 of 118

advisories (3)

Vendor and ecosystem advisories describing this.

SSA-400089SSA-400089: Denial of Service Vulnerability in SIPROTEC 4 and SIPROTEC 4 Compact2025-08-12csaf · siemens_psirtDE
SIPROTEC 4 and SIPROTEC 4 Compact devices contain a vulnerability that could allow an unauthenticated remote attacker to cause a denial of service condition. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends countermeasures for products where fixes are not, or not yet available.
WID-SEC-W-2025-1768Siemens SIPROTEC: Mehrere Schwachstellen ermöglichen Denial of ServiceDeutsch2025-08-12csaf · cert_bundDE
Ein entfernter, anonymer Angreifer oder ein Angreifer mit physischem Zugriff kann mehrere Schwachstellen in Siemens SIPROTEC ausnutzen, um einen Denial of Service Angriff durchzuführen.
ICSA-25-226-12Siemens SIPROTEC 4 and SIPROTEC 4 Compact2025-08-12icsa · cisa_csaf_otUS
SIPROTEC 4 and SIPROTEC 4 Compact devices contain a vulnerability that could allow an unauthenticated remote attacker to cause a denial of service condition. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends countermeasures for products where fixes are not, or not yet available.

also known as (3)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd cert_bund cisa_csaf_ot siemens_psirt NVD CVE.org MITRE

published 2025-08-12modified 2026-06-17

references (3)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan