CVE-2023-28766
Description
A vulnerability has been identified in SIPROTEC 5 6MD85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 6MD86 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 6MD89 (CP300) (All versions >= V7.80 < V9.64), SIPROTEC 5 6MU85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7KE85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7SA82 (CP100) (All versions < V8.90), SIPROTEC 5 7SA82 (CP150) (All versions < V9.40), SIPROTEC 5 7SA86 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7SA87 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7SD82 (CP100) (All versions < V8.90), SIPROTEC 5 7SD82 (CP150) (All versions < V9.40), SIPROTEC 5 7SD86 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7SD87 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7SJ81 (CP100) (All versions < V8.89), SIPROTEC 5 7SJ81 (CP150) (All versions < V9.40), SIPROTEC 5 7SJ82 (CP100) (All versions < V8.89), SIPROTEC 5 7SJ82 (CP150) (All versions < V9.40), SIPROTEC 5 7SJ85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7SJ86 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7SK82 (CP100) (All versions < V8.89), SIPROTEC 5 7SK82 (CP150) (All versions < V9.40), SIPROTEC 5 7SK85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7SL82 (CP100) (All versions < V8.90), SIPROTEC 5 7SL82 (CP150) (All versions < V9.40), SIPROTEC 5 7SL86 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7SL87 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7SS85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7ST85 (CP300) (All versions >= V7.80 < V9.64), SIPROTEC 5 7ST86 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7SX82 (CP150) (All versions < V9.40), SIPROTEC 5 7SX85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7UM85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7UT82 (CP100) (All versions < V8.90), SIPROTEC 5 7UT82 (CP150) (All versions < V9.40), SIPROTEC 5 7UT85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7UT86 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7UT87 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7VE85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7VK87 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7VU85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 Communication Module ETH-BA-2EL (Rev.1) (All versions < V9.40 installed on CP150 and CP300 devices), SIPROTEC 5 Communication Module ETH-BA-2EL (Rev.1) (All versions < V8.89 installed on CP100 devices), SIPROTEC 5 Communication Module ETH-BB-2FO (Rev. 1) (All versions < V9.40 installed on CP150 and CP300 devices), SIPROTEC 5 Communication Module ETH-BB-2FO (Rev. 1) (All versions < V8.89 installed on CP100 devices), SIPROTEC 5 Communication Module ETH-BD-2FO (All versions < V9.40), SIPROTEC 5 Compact 7SX800 (CP050) (All versions < V9.40). Affected devices lack proper validation of http request parameters of the hosted web service. An unauthenticated remote attacker could send specially crafted packets that could cause denial of service condition of the target device.
How to fix
- siemens siprotec_5_6md85_firmware9.40 or later
- siemens siprotec_5_6md86_firmware9.40 or later
- siemens siprotec_5_6mu85_firmware9.40 or later
- siemens siprotec_5_7ke85_firmware9.40 or later
- siemens siprotec_5_7sa82_firmware9.40 or later
- siemens siprotec_5_7sa86_firmware9.40 or later
- siemens siprotec_5_7sa87_firmware9.40 or later
- siemens siprotec_5_7sd82_firmware9.40 or later
- siemens siprotec_5_7sd86_firmware9.40 or later
- siemens siprotec_5_7sd87_firmware9.40 or later
- siemens siprotec_5_7sj81_firmware9.40 or later
- siemens siprotec_5_7sj82_firmware9.40 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| siemens siprotec_5_6md85_firmware | No range specified, v < 9.40 | 9.40 |
| siemens siprotec_5_6md86_firmware | No range specified, v < 9.40 | 9.40 |
| siemens siprotec_5_6md89_firmware | No range specified | — |
| siemens siprotec_5_6mu85_firmware | v < 9.40 | 9.40 |
| siemens siprotec_5_7ke85_firmware | No range specified, v < 9.40 | 9.40 |
| siemens siprotec_5_7sa82_firmware | No range specified, v < 9.40 | 9.40 |
| siemens siprotec_5_7sa86_firmware | No range specified, v < 9.40 | 9.40 |
| siemens siprotec_5_7sa87_firmware | No range specified, v < 9.40 | 9.40 |
| siemens siprotec_5_7sd82_firmware | No range specified, v < 9.40 | 9.40 |
| siemens siprotec_5_7sd86_firmware | No range specified, v < 9.40 | 9.40 |
| siemens siprotec_5_7sd87_firmware | No range specified, v < 9.40 | 9.40 |
| siemens siprotec_5_7sj81_firmware | No range specified, v < 9.40 | 9.40 |
| siemens siprotec_5_7sj82_firmware | No range specified, v < 9.40 | 9.40 |
| siemens siprotec_5_7sj85_firmware | No range specified, v < 9.40 | 9.40 |
| siemens siprotec_5_7sj86_firmware | No range specified, v < 9.40 | 9.40 |
| siemens siprotec_5_7sk82_firmware | No range specified, v < 9.40 | 9.40 |
| siemens siprotec_5_7sk85_firmware | No range specified, v < 9.40 | 9.40 |
| siemens siprotec_5_7sl82_firmware | No range specified, v < 9.40 | 9.40 |
| siemens siprotec_5_7sl86_firmware | No range specified, v < 9.40 | 9.40 |
| siemens siprotec_5_7sl87_firmware | No range specified, v < 9.40 | 9.40 |
| siemens siprotec_5_7ss85_firmware | No range specified, v < 9.40 | 9.40 |
| siemens siprotec_5_7st85_firmware | No range specified | — |
| siemens siprotec_5_7sx85_firmware | v < 9.40 | 9.40 |
| siemens siprotec_5_7um85_firmware | v < 9.40 | 9.40 |
| siemens siprotec_5_7ut82_firmware | No range specified, v < 9.40 | 9.40 |
| siemens siprotec_5_7ut85_firmware | No range specified, v < 9.40 | 9.40 |
| siemens siprotec_5_7ut86_firmware | No range specified, v < 9.40 | 9.40 |
| siemens siprotec_5_7ut87_firmware | No range specified, v < 9.40 | 9.40 |
| siemens siprotec_5_7ve85_firmware | v < 9.40 | 9.40 |
| siemens siprotec_5_7vk87_firmware | No range specified, v < 9.40 | 9.40 |
| siemens siprotec_5_communication_module_ethba2el_firmware | v < 9.40 | 9.40 |
| siemens siprotec_5_communication_module_ethbb2fo_firmware | v < 9.40 | 9.40 |
| siemens siprotec_5_communication_module_ethbd2fo_firmware | v < 9.40 | 9.40 |
| siemens siprotec_5_compact_7sx800_firmware | v < 9.40 | 9.40 |
| siemens siprotec_5_7sa84_firmware | No range specified | — |
| siemens siprotec_5_7sd84_firmware | No range specified | — |
| siemens siprotec_5_7st86_firmware | No range specified | — |
| siemens siprotec_5_7sx82_firmware | v < 9.40 | 9.40 |
| siemens siprotec_5_7vu85_firmware | v < 9.40 | 9.40 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.