← Back to home

ICSA-25-044-05 · Published 2025-08-12 · View on CISA ICS-CERT ↗

Siemens SIPROTEC 5 Devices

CVSS 7.5 HIGH

CVEs (1)

CVE-2024-54015

Remediations

Restrict access to port 161/udp to trusted IP addresses only
Disable the SNMP service running in the communication modules, if not used
Update to V10.0 or later version
Update to V9.68 or later version
Update to V9.83 or later version
Update to V9.90 or later version

Affected Vendors

Siemens

Affected Products (48)

Siemens · SIPROTEC 5 6MD84 (CP300) vers:intdot/<9.90

Siemens · SIPROTEC 5 6MD85 (CP300) vers:intdot/>=8.80|<9.90

Siemens · SIPROTEC 5 6MD86 (CP300) vers:intdot/>=8.80|<9.90

Siemens · SIPROTEC 5 6MD89 (CP300) vers:intdot/>=8.80|<9.90

Siemens · SIPROTEC 5 6MD89 (CP300) V9.6x vers:intdot/<9.68

Siemens · SIPROTEC 5 6MU85 (CP300) vers:intdot/>=8.80|<9.90

Siemens · SIPROTEC 5 7KE85 (CP300) vers:intdot/>=8.80|<10.0

Siemens · SIPROTEC 5 7SA82 (CP150) vers:intdot/<9.90

Siemens · SIPROTEC 5 7SA86 (CP300) vers:intdot/>=8.80|<9.90

Siemens · SIPROTEC 5 7SA87 (CP300) vers:intdot/>=8.80|<9.90

Siemens · SIPROTEC 5 7SD82 (CP150) vers:intdot/<9.90

Siemens · SIPROTEC 5 7SD86 (CP300) vers:intdot/>=8.80|<9.90

Siemens · SIPROTEC 5 7SD87 (CP300) vers:intdot/>=8.80|<9.90

Siemens · SIPROTEC 5 7SJ81 (CP150) vers:intdot/<9.90

Siemens · SIPROTEC 5 7SJ82 (CP150) vers:intdot/<9.90

Siemens · SIPROTEC 5 7SJ85 (CP300) vers:intdot/>=8.80|<9.90

Siemens · SIPROTEC 5 7SJ86 (CP300) vers:intdot/>=8.80|<9.90

Siemens · SIPROTEC 5 7SK82 (CP150) vers:intdot/<9.90

Siemens · SIPROTEC 5 7SK85 (CP300) vers:intdot/>=8.80|<9.90

Siemens · SIPROTEC 5 7SL82 (CP150) vers:intdot/<9.90

Siemens · SIPROTEC 5 7SL86 (CP300) vers:intdot/>=8.80|<9.90

Siemens · SIPROTEC 5 7SL87 (CP300) vers:intdot/>=8.80|<9.90

Siemens · SIPROTEC 5 7SS85 (CP300) vers:intdot/>=8.80|<9.90

Siemens · SIPROTEC 5 7ST85 (CP300) vers:intdot/>=8.80|<10.0

Siemens · SIPROTEC 5 7ST85 (CP300) V9.6x vers:intdot/<9.68

Siemens · SIPROTEC 5 7ST86 (CP300) vers:intdot/<10.0

Siemens · SIPROTEC 5 7ST86 (CP300) V9.8x vers:intdot/<9.83

Siemens · SIPROTEC 5 7SX82 (CP150) vers:intdot/<9.90

Siemens · SIPROTEC 5 7SX85 (CP300) vers:intdot/>=8.80|<9.90

Siemens · SIPROTEC 5 7SY82 (CP150) vers:intdot/<9.90

Siemens · SIPROTEC 5 7UM85 (CP300) vers:intdot/>=8.80|<9.90

Siemens · SIPROTEC 5 7UT82 (CP150) vers:intdot/<9.90

Siemens · SIPROTEC 5 7UT85 (CP300) vers:intdot/>=8.80|<9.90

Siemens · SIPROTEC 5 7UT86 (CP300) vers:intdot/>=8.80|<9.90

Siemens · SIPROTEC 5 7UT87 (CP300) vers:intdot/>=8.80|<9.90

Siemens · SIPROTEC 5 7VE85 (CP300) vers:intdot/>=8.80|<9.90

Siemens · SIPROTEC 5 7VK87 (CP300) vers:intdot/>=8.80|<9.90

Siemens · SIPROTEC 5 7VU85 (CP300) vers:intdot/<9.90

Siemens · SIPROTEC 5 Communication Module ETH-BA-2EL (Rev.2) vers:intdot/<9.90

Siemens · SIPROTEC 5 Communication Module ETH-BA-2EL (Rev.2) V9.6 vers:intdot/<9.68

Siemens · SIPROTEC 5 Communication Module ETH-BA-2EL (Rev.2) V9.8 vers:intdot/<9.83

Siemens · SIPROTEC 5 Communication Module ETH-BB-2FO (Rev. 2) vers:intdot/<9.90

Siemens · SIPROTEC 5 Communication Module ETH-BB-2FO (Rev. 2) V9.6 vers:intdot/<9.68

Siemens · SIPROTEC 5 Communication Module ETH-BB-2FO (Rev. 2) V9.8 vers:intdot/<9.83

Siemens · SIPROTEC 5 Communication Module ETH-BD-2FO vers:intdot/>=8.80|<9.90

Siemens · SIPROTEC 5 Communication Module ETH-BD-2FO V9.6 vers:intdot/<9.68

Siemens · SIPROTEC 5 Communication Module ETH-BD-2FO V9.8 vers:intdot/<9.83

Siemens · SIPROTEC 5 Compact 7SX800 (CP050) vers:intdot/>=9.50|<9.90

Affected Sectors

Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities

Get alerted to advisories like this

OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.

Start free trial Learn more