ICSA-23-080-04 · Published 2026-04-16 · View on CISA ICS-CERT ↗

Siemens RADIUS Client of SIPROTEC 5 Devices

CVSS 7.5 HIGH

Risk Summary

The RADIUS client implementation of the VxWorks platform in SIPROTEC 5 devices contains a denial of service vulnerability that could be triggered when a specially crafted packet is sent by a RADIUS server. Siemens has released new versions for the affected products and recommends to update to the latest versions.

CVEs (1)

CVE-2022-38767

Remediations

Ensure that only a trusted, properly hardened RADIUS server is configured in your environment
Protect the pre-shared key for RADIUS from unauthorized access
Update to V9.30 or later version
Update to V9.64 or later version

Affected Vendors

Siemens

Affected Products (28)

Siemens · SIPROTEC 5 6MD85 (CP300) vers:intdot/>=7.80|<9.30

Siemens · SIPROTEC 5 6MD86 (CP300) vers:intdot/>=7.80|<9.30

Siemens · SIPROTEC 5 6MD89 (CP300) vers:intdot/>=7.80|<9.64

Siemens · SIPROTEC 5 6MU85 (CP300) vers:intdot/>=7.90|<9.30

Siemens · SIPROTEC 5 7KE85 (CP300) vers:intdot/>=7.80|<9.30

Siemens · SIPROTEC 5 7SA86 (CP300) vers:intdot/>=7.80|<9.30

Siemens · SIPROTEC 5 7SA87 (CP300) vers:intdot/>=7.80|<9.30

Siemens · SIPROTEC 5 7SD86 (CP300) vers:intdot/>=7.80|<9.30

Siemens · SIPROTEC 5 7SD87 (CP300) vers:intdot/>=7.80|<9.30

Siemens · SIPROTEC 5 7SJ85 (CP300) vers:intdot/>=7.80|<9.30

Siemens · SIPROTEC 5 7SJ86 (CP300) vers:intdot/>=7.80|<9.30

Siemens · SIPROTEC 5 7SK85 (CP300) vers:intdot/>=7.80|<9.30

Siemens · SIPROTEC 5 7SL86 (CP300) vers:intdot/>=7.80|<9.30

Siemens · SIPROTEC 5 7SL87 (CP300) vers:intdot/>=7.80|<9.30

Siemens · SIPROTEC 5 7SS85 (CP300) vers:intdot/>=7.80|<9.30

Siemens · SIPROTEC 5 7ST85 (CP300) vers:intdot/>=8.81|<9.30

Siemens · SIPROTEC 5 7ST86 (CP300) vers:intdot/>=9.20|<9.30

Siemens · SIPROTEC 5 7SX85 (CP300) vers:intdot/>=8.30|<9.30

Siemens · SIPROTEC 5 7UM85 (CP300) vers:intdot/>=7.80|<9.30

Siemens · SIPROTEC 5 7UT85 (CP300) vers:intdot/>=7.80|<9.30

Siemens · SIPROTEC 5 7UT86 (CP300) vers:intdot/>=7.80|<9.30

Siemens · SIPROTEC 5 7UT87 (CP300) vers:intdot/>=7.80|<9.30

Siemens · SIPROTEC 5 7VE85 (CP300) vers:intdot/>=7.80|<9.30

Siemens · SIPROTEC 5 7VK87 (CP300) vers:intdot/>=7.80|<9.30

Siemens · SIPROTEC 5 Communication Module ETH-BA-2EL (Rev.1) vers:intdot/>=7.80|<9.30

Siemens · SIPROTEC 5 Communication Module ETH-BB-2FO (Rev. 1) vers:intdot/>=7.80|<9.30

Siemens · SIPROTEC 5 Communication Module ETH-BD-2FO vers:intdot/>=7.80|<9.30

Siemens · SIPROTEC 5 Compact 7SX800 (CP050) vers:intdot/>=8.70|<9.30

Affected Sectors

Critical Manufacturing

Get alerted to advisories like this

OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.

Start free trial Learn more