CVE-2024-54015

highpriority · track · 0OT risk · elevatedEPSS 0.006 · 48 %ileDEEUNLRUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

0.58% (48th) EPSS

CVSS 7.5 · high

Is it mine?

249 products

Check your exposure

Who says so?

7 sources

cnnvd · enisa_euvd · fstec_bdu · cert_bund

EPSS · scored 2026-10-26

A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V9.90), SIPROTEC 5 6MD85 (CP300) (All versions >= V8.80 < V9.90), SIPROTEC 5 6MD86 (CP300) (All versions >= V8.80 < V9.90), SIPROTEC 5 6MD89 (CP300) (All versions >= V8.80 < V9.90), SIPROTEC 5 6MD89 (CP300) V9.6x (All versions < V9.68), SIPROTEC 5 6MU85 (CP300) (All versions >= V8.80 < V9.90), SIPROTEC 5 7KE85 (CP300) (All versions >= V8.80 < V10.0), SIPROTEC 5 7SA82 (CP150) (All versions < V9.90), SIPROTEC 5 7SA86 (CP300) (All versions >= V8.80 < V9.90), SIPROTEC 5 7SA87 (CP300) (All versions >= V8.80 < V9.90), SIPROTEC 5 7SD82 (CP150) (All versions < V9.90), SIPROTEC 5 7SD86 (CP300) (All versions >= V8.80 < V9.90), SIPROTEC 5 7SD87 (CP300) (All versions >= V8.80 < V9.90), SIPROTEC 5 7SJ81 (CP150) (All versions < V9.90), SIPROTEC 5 7SJ82 (CP150) (All versions < V9.90), SIPROTEC 5 7SJ85 (CP300) (All versions >= V8.80 < V9.90), SIPROTEC 5 7SJ86 (CP300) (All versions >= V8.80 < V9.90), SIPROTEC 5 7SK82 (CP150) (All versions < V9.90), SIPROTEC 5 7SK85 (CP300) (All versions >= V8.80 < V9.90), SIPROTEC 5 7SL82 (CP150) (All versions < V9.90), SIPROTEC 5 7SL86 (CP300) (All versions >= V8.80 < V9.90), SIPROTEC 5 7SL87 (CP300) (All versions >= V8.80 < V9.90), SIPROTEC 5 7SS85 (CP300) (All versions >= V8.80 < V9.90), SIPROTEC 5 7ST85 (CP300) (All versions >= V8.80 < V10.0), SIPROTEC 5 7ST85 (CP300) V9.6x (All versions < V9.68), SIPROTEC 5 7ST86 (CP300) (All versions < V10.0), SIPROTEC 5 7ST86 (CP300) V9.8x (All versions < V9.83), SIPROTEC 5 7SX82 (CP150) (All versions < V9.90), SIPROTEC 5 7SX85 (CP300) (All versions >= V8.80 < V9.90), SIPROTEC 5 7SY82 (CP150) (All versions < V9.90), SIPROTEC 5 7UM85 (CP300) (All versions >= V8.80 < V9.90), SIPROTEC 5 7UT82 (CP150) (All versions < V9.90), SIPROTEC 5 7UT85 (CP300) (All versions >= V8.80 < V9.90), SIPROTEC 5 7UT86 (CP300) (All versions >= V8.80 < V9.90), SIPROTEC 5 7UT87 (CP300) (All versions >= V8.80 < V9.90), SIPROTEC 5 7VE85 (CP300) (All versions >= V8.80 < V9.90), SIPROTEC 5 7VK87 (CP300) (All versions >= V8.80 < V9.90), SIPROTEC 5 7VU85 (CP300) (All versions < V9.90), SIPROTEC 5 Communication Module ETH-BA-2EL (Rev.2) (All versions < V9.90), SIPROTEC 5 Communication Module ETH-BA-2EL (Rev.2) V9.6 (All versions < V9.68), SIPROTEC 5 Communication Module ETH-BA-2EL (Rev.2) V9.8 (All versions < V9.83), SIPROTEC 5 Communication Module ETH-BB-2FO (Rev. 2) (All versions < V9.90), SIPROTEC 5 Communication Module ETH-BB-2FO (Rev. 2) V9.6 (All versions < V9.68), SIPROTEC 5 Communication Module ETH-BB-2FO (Rev. 2) V9.8 (All versions < V9.83), SIPROTEC 5 Communication Module ETH-BD-2FO (All versions >= V8.80 < V9.90), SIPROTEC 5 Communication Module ETH-BD-2FO V9.6 (All versions < V9.68), SIPROTEC 5 Communication Module ETH-BD-2FO V9.8 (All versions < V9.83), SIPROTEC 5 Compact 7SX800 (CP050) (All versions >= V9.50 < V9.90). Affected devices do not properly validate SNMP GET requests. This could allow an unauthenticated, remote attacker to retrieve sensitive information of the affected devices with SNMPv2 GET requests using default credentials.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

FixedSIPROTEC 5 6MD84 (CP300)siemens_psirt
Update to V9.90 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/
FixedSIPROTEC 5 6MD85 (CP300)siemens_psirt
Update to V9.90 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/
FixedSIPROTEC 5 6MD86 (CP300)siemens_psirt
Update to V9.90 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/
FixedSIPROTEC 5 6MD89 (CP300)siemens_psirt
Update to V9.90 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/
FixedSIPROTEC 5 6MD89 (CP300) V9.6xsiemens_psirt
Update to V9.68 or later version
https://support.industry.siemens.com/cs/ww/en/view/109742950/
FixedSIPROTEC 5 6MU85 (CP300)siemens_psirt
Update to V9.90 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/
FixedSIPROTEC 5 7KE85 (CP300)siemens_psirt
Update to V10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757430/
FixedSIPROTEC 5 7SA82 (CP150)siemens_psirt
Update to V9.90 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757433/
FixedSIPROTEC 5 7SA86 (CP300)siemens_psirt
Update to V9.90 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/
FixedSIPROTEC 5 7SA87 (CP300)siemens_psirt
Update to V9.90 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/
FixedSIPROTEC 5 7SD82 (CP150)siemens_psirt
Update to V9.90 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757433/
FixedSIPROTEC 5 7SD86 (CP300)siemens_psirt
Update to V9.90 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/
FixedSIPROTEC 5 7SD87 (CP300)siemens_psirt
Update to V9.90 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/
FixedSIPROTEC 5 7SJ81 (CP150)siemens_psirt
Update to V9.90 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757433/
FixedSIPROTEC 5 7SJ82 (CP150)siemens_psirt
Update to V9.90 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757433/
FixedSIPROTEC 5 7SJ85 (CP300)siemens_psirt
Update to V9.90 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/
FixedSIPROTEC 5 7SJ86 (CP300)siemens_psirt
Update to V9.90 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/
FixedSIPROTEC 5 7SK82 (CP150)siemens_psirt
Update to V9.90 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757433/
FixedSIPROTEC 5 7SK85 (CP300)siemens_psirt
Update to V9.90 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/
FixedSIPROTEC 5 7SL82 (CP150)siemens_psirt
Update to V9.90 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757433/
FixedSIPROTEC 5 7SL86 (CP300)siemens_psirt
Update to V9.90 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/
FixedSIPROTEC 5 7SL87 (CP300)siemens_psirt
Update to V9.90 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/
FixedSIPROTEC 5 7SS85 (CP300)siemens_psirt
Update to V9.90 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/
FixedSIPROTEC 5 7ST85 (CP300)siemens_psirt
Update to V10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757430/
FixedSIPROTEC 5 7ST85 (CP300) V9.6xsiemens_psirt
Update to V9.68 or later version
https://support.industry.siemens.com/cs/ww/en/view/109742950/
FixedSIPROTEC 5 7ST86 (CP300)siemens_psirt
Update to V10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757430/
FixedSIPROTEC 5 7ST86 (CP300) V9.8xsiemens_psirt
Update to V9.83 or later version
https://support.industry.siemens.com/cs/ww/en/view/109768428/
FixedSIPROTEC 5 7SX82 (CP150)siemens_psirt
Update to V9.90 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757433/
FixedSIPROTEC 5 7SX85 (CP300)siemens_psirt
Update to V9.90 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/
FixedSIPROTEC 5 7SY82 (CP150)siemens_psirt
Update to V9.90 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757433/
FixedSIPROTEC 5 7UM85 (CP300)siemens_psirt
Update to V9.90 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/
FixedSIPROTEC 5 7UT82 (CP150)siemens_psirt
Update to V9.90 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757433/
FixedSIPROTEC 5 7UT85 (CP300)siemens_psirt
Update to V9.90 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/
FixedSIPROTEC 5 7UT86 (CP300)siemens_psirt
Update to V9.90 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/
FixedSIPROTEC 5 7UT87 (CP300)siemens_psirt
Update to V9.90 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/
FixedSIPROTEC 5 7VE85 (CP300)siemens_psirt
Update to V9.90 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/
FixedSIPROTEC 5 7VK87 (CP300)siemens_psirt
Update to V9.90 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/
FixedSIPROTEC 5 7VU85 (CP300)siemens_psirt
Update to V9.90 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/
FixedSIPROTEC 5 Communication Module ETH-BA-2EL (Rev.2)siemens_psirt
Update to V9.90 or later version
https://support.industry.siemens.com/cs/ww/en/view/109740816/
FixedSIPROTEC 5 Communication Module ETH-BA-2EL (Rev.2) V9.6siemens_psirt
Update to V9.68 or later version
https://support.industry.siemens.com/cs/ww/en/view/109740816/
FixedSIPROTEC 5 Communication Module ETH-BA-2EL (Rev.2) V9.8siemens_psirt
Update to V9.83 or later version
https://support.industry.siemens.com/cs/ww/en/view/109740816/
FixedSIPROTEC 5 Communication Module ETH-BB-2FO (Rev. 2)siemens_psirt
Update to V9.90 or later version
https://support.industry.siemens.com/cs/ww/en/view/109740816/
FixedSIPROTEC 5 Communication Module ETH-BB-2FO (Rev. 2) V9.6siemens_psirt
Update to V9.68 or later version
https://support.industry.siemens.com/cs/ww/en/view/109740816/
FixedSIPROTEC 5 Communication Module ETH-BB-2FO (Rev. 2) V9.8siemens_psirt
Update to V9.83 or later version
https://support.industry.siemens.com/cs/ww/en/view/109740816/
FixedSIPROTEC 5 Communication Module ETH-BD-2FOsiemens_psirt
Update to V9.90 or later version
https://support.industry.siemens.com/cs/ww/en/view/109740816/
FixedSIPROTEC 5 Communication Module ETH-BD-2FO V9.6siemens_psirt
Update to V9.68 or later version
https://support.industry.siemens.com/cs/ww/en/view/109740816/
FixedSIPROTEC 5 Communication Module ETH-BD-2FO V9.8siemens_psirt
Update to V9.83 or later version
https://support.industry.siemens.com/cs/ww/en/view/109740816/
FixedSIPROTEC 5 Compact 7SX800 (CP050)siemens_psirt
Update to V9.90 or later version
https://support.industry.siemens.com/cs/ww/en/view/109796884/
FixedSIPROTEC 5 6MD84 (CP300)cisa_csaf_ot
Update to V9.90 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/
FixedSIPROTEC 5 6MD85 (CP300)cisa_csaf_ot
Update to V9.90 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/
FixedSIPROTEC 5 6MD86 (CP300)cisa_csaf_ot
Update to V9.90 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/
FixedSIPROTEC 5 6MD89 (CP300)cisa_csaf_ot
Update to V9.90 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/
FixedSIPROTEC 5 6MD89 (CP300) V9.6xcisa_csaf_ot
Update to V9.68 or later version
https://support.industry.siemens.com/cs/ww/en/view/109742950/
FixedSIPROTEC 5 6MU85 (CP300)cisa_csaf_ot
Update to V9.90 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/
FixedSIPROTEC 5 7KE85 (CP300)cisa_csaf_ot
Update to V10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757430/
FixedSIPROTEC 5 7SA82 (CP150)cisa_csaf_ot
Update to V9.90 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757433/
FixedSIPROTEC 5 7SA86 (CP300)cisa_csaf_ot
Update to V9.90 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/
FixedSIPROTEC 5 7SA87 (CP300)cisa_csaf_ot
Update to V9.90 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/
FixedSIPROTEC 5 7SD82 (CP150)cisa_csaf_ot
Update to V9.90 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757433/
FixedSIPROTEC 5 7SD86 (CP300)cisa_csaf_ot
Update to V9.90 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/
FixedSIPROTEC 5 7SD87 (CP300)cisa_csaf_ot
Update to V9.90 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/
FixedSIPROTEC 5 7SJ81 (CP150)cisa_csaf_ot
Update to V9.90 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757433/
FixedSIPROTEC 5 7SJ82 (CP150)cisa_csaf_ot
Update to V9.90 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757433/
FixedSIPROTEC 5 7SJ85 (CP300)cisa_csaf_ot
Update to V9.90 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/
FixedSIPROTEC 5 7SJ86 (CP300)cisa_csaf_ot
Update to V9.90 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/
FixedSIPROTEC 5 7SK82 (CP150)cisa_csaf_ot
Update to V9.90 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757433/
FixedSIPROTEC 5 7SK85 (CP300)cisa_csaf_ot
Update to V9.90 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/
FixedSIPROTEC 5 7SL82 (CP150)cisa_csaf_ot
Update to V9.90 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757433/
FixedSIPROTEC 5 7SL86 (CP300)cisa_csaf_ot
Update to V9.90 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/
FixedSIPROTEC 5 7SL87 (CP300)cisa_csaf_ot
Update to V9.90 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/
FixedSIPROTEC 5 7SS85 (CP300)cisa_csaf_ot
Update to V9.90 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/
FixedSIPROTEC 5 7ST85 (CP300)cisa_csaf_ot
Update to V10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757430/
FixedSIPROTEC 5 7ST85 (CP300) V9.6xcisa_csaf_ot
Update to V9.68 or later version
https://support.industry.siemens.com/cs/ww/en/view/109742950/
FixedSIPROTEC 5 7ST86 (CP300)cisa_csaf_ot
Update to V10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757430/
FixedSIPROTEC 5 7ST86 (CP300) V9.8xcisa_csaf_ot
Update to V9.83 or later version
https://support.industry.siemens.com/cs/ww/en/view/109768428/
FixedSIPROTEC 5 7SX82 (CP150)cisa_csaf_ot
Update to V9.90 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757433/
FixedSIPROTEC 5 7SX85 (CP300)cisa_csaf_ot
Update to V9.90 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/
FixedSIPROTEC 5 7SY82 (CP150)cisa_csaf_ot
Update to V9.90 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757433/
FixedSIPROTEC 5 7UM85 (CP300)cisa_csaf_ot
Update to V9.90 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/
FixedSIPROTEC 5 7UT82 (CP150)cisa_csaf_ot
Update to V9.90 or later version
https://support.industry.siemens.com/cs/ww/en/view/109757433/
FixedSIPROTEC 5 7UT85 (CP300)cisa_csaf_ot
Update to V9.90 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/
FixedSIPROTEC 5 7UT86 (CP300)cisa_csaf_ot
Update to V9.90 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/
FixedSIPROTEC 5 7UT87 (CP300)cisa_csaf_ot
Update to V9.90 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/
FixedSIPROTEC 5 7VE85 (CP300)cisa_csaf_ot
Update to V9.90 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/
FixedSIPROTEC 5 7VK87 (CP300)cisa_csaf_ot
Update to V9.90 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/
FixedSIPROTEC 5 7VU85 (CP300)cisa_csaf_ot
Update to V9.90 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814150/
FixedSIPROTEC 5 Communication Module ETH-BA-2EL (Rev.2)cisa_csaf_ot
Update to V9.90 or later version
https://support.industry.siemens.com/cs/ww/en/view/109740816/
FixedSIPROTEC 5 Communication Module ETH-BA-2EL (Rev.2) V9.6cisa_csaf_ot
Update to V9.68 or later version
https://support.industry.siemens.com/cs/ww/en/view/109740816/
FixedSIPROTEC 5 Communication Module ETH-BA-2EL (Rev.2) V9.8cisa_csaf_ot
Update to V9.83 or later version
https://support.industry.siemens.com/cs/ww/en/view/109740816/
FixedSIPROTEC 5 Communication Module ETH-BB-2FO (Rev. 2)cisa_csaf_ot
Update to V9.90 or later version
https://support.industry.siemens.com/cs/ww/en/view/109740816/
FixedSIPROTEC 5 Communication Module ETH-BB-2FO (Rev. 2) V9.6cisa_csaf_ot
Update to V9.68 or later version
https://support.industry.siemens.com/cs/ww/en/view/109740816/
FixedSIPROTEC 5 Communication Module ETH-BB-2FO (Rev. 2) V9.8cisa_csaf_ot
Update to V9.83 or later version
https://support.industry.siemens.com/cs/ww/en/view/109740816/
FixedSIPROTEC 5 Communication Module ETH-BD-2FOcisa_csaf_ot
Update to V9.90 or later version
https://support.industry.siemens.com/cs/ww/en/view/109740816/
FixedSIPROTEC 5 Communication Module ETH-BD-2FO V9.6cisa_csaf_ot
Update to V9.68 or later version
https://support.industry.siemens.com/cs/ww/en/view/109740816/
FixedSIPROTEC 5 Communication Module ETH-BD-2FO V9.8cisa_csaf_ot
Update to V9.83 or later version
https://support.industry.siemens.com/cs/ww/en/view/109740816/
FixedSIPROTEC 5 Compact 7SX800 (CP050)cisa_csaf_ot
Update to V9.90 or later version
https://support.industry.siemens.com/cs/ww/en/view/109796884/
MitigationSIPROTEC 5 6MD84 (CP300)siemens_psirt
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 6MD85 (CP300)siemens_psirt
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 6MD86 (CP300)siemens_psirt
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 6MD89 (CP300)siemens_psirt
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 6MD89 (CP300) V9.6xsiemens_psirt
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 6MU85 (CP300)siemens_psirt
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 7KE85 (CP300)siemens_psirt
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 7SA82 (CP150)siemens_psirt
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 7SA86 (CP300)siemens_psirt
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 7SA87 (CP300)siemens_psirt
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 7SD82 (CP150)siemens_psirt
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 7SD86 (CP300)siemens_psirt
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 7SD87 (CP300)siemens_psirt
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 7SJ81 (CP150)siemens_psirt
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 7SJ82 (CP150)siemens_psirt
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 7SJ85 (CP300)siemens_psirt
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 7SJ86 (CP300)siemens_psirt
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 7SK82 (CP150)siemens_psirt
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 7SK85 (CP300)siemens_psirt
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 7SL82 (CP150)siemens_psirt
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 7SL86 (CP300)siemens_psirt
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 7SL87 (CP300)siemens_psirt
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 7SS85 (CP300)siemens_psirt
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 7ST85 (CP300)siemens_psirt
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 7ST85 (CP300) V9.6xsiemens_psirt
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 7ST86 (CP300)siemens_psirt
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 7ST86 (CP300) V9.8xsiemens_psirt
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 7SX82 (CP150)siemens_psirt
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 7SX85 (CP300)siemens_psirt
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 7SY82 (CP150)siemens_psirt
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 7UM85 (CP300)siemens_psirt
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 7UT82 (CP150)siemens_psirt
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 7UT85 (CP300)siemens_psirt
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 7UT86 (CP300)siemens_psirt
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 7UT87 (CP300)siemens_psirt
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 7VE85 (CP300)siemens_psirt
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 7VK87 (CP300)siemens_psirt
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 7VU85 (CP300)siemens_psirt
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 Communication Module ETH-BA-2EL (Rev.2)siemens_psirt
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 Communication Module ETH-BA-2EL (Rev.2) V9.6siemens_psirt
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 Communication Module ETH-BA-2EL (Rev.2) V9.8siemens_psirt
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 Communication Module ETH-BB-2FO (Rev. 2)siemens_psirt
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 Communication Module ETH-BB-2FO (Rev. 2) V9.6siemens_psirt
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 Communication Module ETH-BB-2FO (Rev. 2) V9.8siemens_psirt
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 Communication Module ETH-BD-2FOsiemens_psirt
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 Communication Module ETH-BD-2FO V9.6siemens_psirt
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 Communication Module ETH-BD-2FO V9.8siemens_psirt
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 Compact 7SX800 (CP050)siemens_psirt
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 6MD84 (CP300)cisa_csaf_ot
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 6MD85 (CP300)cisa_csaf_ot
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 6MD86 (CP300)cisa_csaf_ot
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 6MD89 (CP300)cisa_csaf_ot
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 6MD89 (CP300) V9.6xcisa_csaf_ot
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 6MU85 (CP300)cisa_csaf_ot
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 7KE85 (CP300)cisa_csaf_ot
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 7SA82 (CP150)cisa_csaf_ot
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 7SA86 (CP300)cisa_csaf_ot
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 7SA87 (CP300)cisa_csaf_ot
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 7SD82 (CP150)cisa_csaf_ot
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 7SD86 (CP300)cisa_csaf_ot
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 7SD87 (CP300)cisa_csaf_ot
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 7SJ81 (CP150)cisa_csaf_ot
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 7SJ82 (CP150)cisa_csaf_ot
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 7SJ85 (CP300)cisa_csaf_ot
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 7SJ86 (CP300)cisa_csaf_ot
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 7SK82 (CP150)cisa_csaf_ot
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 7SK85 (CP300)cisa_csaf_ot
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 7SL82 (CP150)cisa_csaf_ot
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 7SL86 (CP300)cisa_csaf_ot
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 7SL87 (CP300)cisa_csaf_ot
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 7SS85 (CP300)cisa_csaf_ot
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 7ST85 (CP300)cisa_csaf_ot
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 7ST85 (CP300) V9.6xcisa_csaf_ot
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 7ST86 (CP300)cisa_csaf_ot
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 7ST86 (CP300) V9.8xcisa_csaf_ot
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 7SX82 (CP150)cisa_csaf_ot
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 7SX85 (CP300)cisa_csaf_ot
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 7SY82 (CP150)cisa_csaf_ot
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 7UM85 (CP300)cisa_csaf_ot
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 7UT82 (CP150)cisa_csaf_ot
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 7UT85 (CP300)cisa_csaf_ot
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 7UT86 (CP300)cisa_csaf_ot
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 7UT87 (CP300)cisa_csaf_ot
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 7VE85 (CP300)cisa_csaf_ot
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 7VK87 (CP300)cisa_csaf_ot
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 7VU85 (CP300)cisa_csaf_ot
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 Communication Module ETH-BA-2EL (Rev.2)cisa_csaf_ot
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 Communication Module ETH-BA-2EL (Rev.2) V9.6cisa_csaf_ot
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 Communication Module ETH-BA-2EL (Rev.2) V9.8cisa_csaf_ot
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 Communication Module ETH-BB-2FO (Rev. 2)cisa_csaf_ot
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 Communication Module ETH-BB-2FO (Rev. 2) V9.6cisa_csaf_ot
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 Communication Module ETH-BB-2FO (Rev. 2) V9.8cisa_csaf_ot
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 Communication Module ETH-BD-2FOcisa_csaf_ot
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 Communication Module ETH-BD-2FO V9.6cisa_csaf_ot
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 Communication Module ETH-BD-2FO V9.8cisa_csaf_ot
Disable the SNMP service running in the communication modules, if not used
MitigationSIPROTEC 5 Compact 7SX800 (CP050)cisa_csaf_ot
Disable the SNMP service running in the communication modules, if not used

cvss

Technical severity, 0–10. One row per scoring source.

8.7

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 6.6–8.7

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:Nsecondary · NCSC-NL NL

v3.17.5highAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:Nsecondary · FSTEC (BDU) RU

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:Nsecondary · productcert@siemens.com DEexploitability 3.9 · impact 3.6

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:Nsecondary · Siemens ProductCERT DE

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:Nsecondary · CISA US

v4.08.7highCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:Nsecondary · ENISA EU

v4.08.7highCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · productcert@siemens.com DE

v4.06.6mediumCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · CVSS-BT (t0sche)

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: none · Automatable: yes · Technical Impact: partialcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-1392USCWE-1392USCWE-1392USCWE-1392USCWE-1392US

affected products (249)

Products and version ranges known to be affected.

Siemens SIPROTEC 5all versionscert_bundDEcpe:/h:siemens:siprotec:5
Siemens SIPROTEC 5 <V9.90all versionscert_bundDE
Siemens SIPROTEC≤ 5 <V9.90cert_bundDE
SIPROTEC 5 6MD84 (CP300)all versionscisa_csaf_otUS
SIPROTEC 5 6MD85 (CP300)all versionscisa_csaf_otUS
SIPROTEC 5 6MD86 (CP300)all versionscisa_csaf_otUS
SIPROTEC 5 6MD89 (CP300)all versionscisa_csaf_otUS
SIPROTEC 5 6MD89 (CP300) V9.6xall versionscisa_csaf_otUS
SIPROTEC 5 6MU85 (CP300)all versionscisa_csaf_otUS
SIPROTEC 5 7KE85 (CP300)all versionscisa_csaf_otUS
SIPROTEC 5 7SA82 (CP150)all versionscisa_csaf_otUS
SIPROTEC 5 7SA86 (CP300)all versionscisa_csaf_otUS
SIPROTEC 5 7SA87 (CP300)all versionscisa_csaf_otUS
SIPROTEC 5 7SD82 (CP150)all versionscisa_csaf_otUS
SIPROTEC 5 7SD86 (CP300)all versionscisa_csaf_otUS
SIPROTEC 5 7SD87 (CP300)all versionscisa_csaf_otUS
SIPROTEC 5 7SJ81 (CP150)all versionscisa_csaf_otUS
SIPROTEC 5 7SJ82 (CP150)all versionscisa_csaf_otUS
SIPROTEC 5 7SJ85 (CP300)all versionscisa_csaf_otUS
SIPROTEC 5 7SJ86 (CP300)all versionscisa_csaf_otUS

showing 20 of 249

advisories (4)

Vendor and ecosystem advisories describing this.

NCSC-2025-0061Kwetsbaarheden verholpen in Siemens productenNL2025-02-14csaf · ncsc_nlNL
Siemens heeft kwetsbaarheden verholpen in diverse producten als APOGEE, Opcenter, RUGGEDCOM, SCALANCE, SIMATIC, SIPROTEC en Teamcenter.
SSA-767615SSA-767615: Information Disclosure Vulnerability in SIPROTEC 5 Devices2025-02-11csaf · siemens_psirtDE
An information disclosure vulnerability in SIPROTEC 5 devices could allow an unauthenticated, remote attacker to retrieve sensitive information of the device. Siemens has released new versions for the affected products and recommends to update to the latest versions.
WID-SEC-W-2025-0313Siemens SIPROTEC: Mehrere SchwachstellenDeutsch2025-02-10csaf · cert_bundDE
Ein Angreifer mit physischem Zugriff kann mehrere Schwachstellen in Siemens SIPROTEC ausnutzen, um Sicherheitsvorkehrungen zu umgehen oder Informationen auszuspähen.
ICSA-25-044-05Siemens SIPROTEC 5 Devices2025-02-11icsa · cisa_csaf_otUS
An information disclosure vulnerability in SIPROTEC 5 devices could allow an unauthenticated, remote attacker to retrieve sensitive information of the device. Siemens has released new versions for the affected products and recommends to update to the latest versions.

also known as (5)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu cert_bund cisa_csaf_ot ncsc_nl siemens_psirt NVD CVE.org MITRE

published 2025-02-11modified 2026-06-17

references (4)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan