← Back to home
ICSA-15-202-01  ·  Published 2025-06-25  ·  View on CISA ICS-CERT ↗

Siemens SIPROTEC Denial-of-Service Vulnerability

CVSS 7.8 HIGH

CVEs (1)

Remediations

  • Siemens has provided firmware update V4.25 for the EN100 module to fix the vulnerability.
  • The firmware update for SIPROTEC 4 can be obtained here: (http://www.siemens.com/downloads/siprotec-4)
  • The firmware update for SIPROTEC Compact can be obtained here: (http://www.siemens.com/downloads/siprotec-compact)
  • For more information on this vulnerability and more detailed mitigation instructions, please see Siemens Security Advisory SSA-732541 at the following location: (http://www.siemens.com/cert/advisories)

Affected Vendors

Siemens

Affected Products (2)

Siemens · SIPROTEC 4 and SIPROTEC Compact product families vers:all/*
Siemens · EN100 Ethernet module <=V4.24

Get alerted to advisories like this

OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.

Start free trial Learn more