← Back to home

ICSA-25-135-05 · Published 2025-11-11 · View on CISA ICS-CERT ↗

Siemens SIPROTEC and SICAM

CVSS 9.0 CRITICAL

CVEs (1)

CVE-2024-3596

Remediations

Conﬁgure the RADIUS server to require the presence of a Message-Authenticator attribute in all Access-Request packets from RADIUS client devices that support it
Restrict access to the networks where RADIUS messages are exchanged (e.g., send RADIUS traffic via management network or a dedicated VLAN)
Currently no fix is available
Update to V10.0 or later version
Update to V16.51 or later version
Update to V2.20.0 or later version
Update to V2.50 or later version
Update to V2.70 or later version
Update to V2.83 or later version
Update to V6.20 or later version
Update to V9.68 or later version
Update to V9.83 or later version
Update to V8.90 or later V8.xx version

Affected Vendors

Siemens

Affected Products (59)

Siemens · CPC80 Central Processing/Communication vers:intdot/<16.51

Siemens · CPCI85 Central Processing/Communication vers:intdot/<6.20

Siemens · POWER METER SICAM Q100 family vers:intdot/<2.70

Siemens · POWER METER SICAM Q200 family vers:intdot/<2.83

Siemens · Powerlink IP vers:all/*

Siemens · SICAM AK 3 vers:all/*

Siemens · SICAM BC vers:all/*

Siemens · SICAM GridEdge (Classic) vers:all/*

Siemens · SICAM GridEdge Applications for SICAM 8 Platform vers:all/*

Siemens · SICAM GridPass vers:intdot/<2.50

Siemens · SICAM TM vers:all/*

Siemens · SICORE Base system vers:intdot/<2.20.0

Siemens · SIPROTEC 5 - CP200 Devices vers:all/*

Siemens · SIPROTEC 5 6MD84 (CP300) vers:intdot/<10.0

Siemens · SIPROTEC 5 6MD85 (CP300) vers:intdot/>=7.80|<10.0

Siemens · SIPROTEC 5 6MD86 (CP300) vers:intdot/>=7.80|<10.0

Siemens · SIPROTEC 5 6MD89 (CP300) vers:intdot/>=7.80|<10.0

Siemens · SIPROTEC 5 6MD89 (CP300) V9.6x vers:intdot/<9.68

Siemens · SIPROTEC 5 6MU85 (CP300) vers:intdot/<10.0

Siemens · SIPROTEC 5 7KE85 (CP300) vers:intdot/>=7.80|<10.0

Siemens · SIPROTEC 5 7SA82 (CP100) vers:intdot/>=7.80|<8.90

Siemens · SIPROTEC 5 7SA82 (CP150) vers:intdot/<10.0

Siemens · SIPROTEC 5 7SA86 (CP300) vers:intdot/>=7.80|<10.0

Siemens · SIPROTEC 5 7SA87 (CP300) vers:intdot/>=7.80|<10.0

Siemens · SIPROTEC 5 7SD82 (CP100) vers:intdot/>=7.80|<8.90

Siemens · SIPROTEC 5 7SD82 (CP150) vers:intdot/<10.0

Siemens · SIPROTEC 5 7SD86 (CP300) vers:intdot/>=7.80|<10.0

Siemens · SIPROTEC 5 7SD87 (CP300) vers:intdot/>=7.80|<10.0

Siemens · SIPROTEC 5 7SJ81 (CP100) vers:intdot/>=7.80|<8.90

Siemens · SIPROTEC 5 7SJ81 (CP150) vers:intdot/<10.0

Siemens · SIPROTEC 5 7SJ82 (CP100) vers:intdot/>=7.80|<8.90

Siemens · SIPROTEC 5 7SJ82 (CP150) vers:intdot/<10.0

Siemens · SIPROTEC 5 7SJ85 (CP300) vers:intdot/>=7.80|<10.0

Siemens · SIPROTEC 5 7SJ86 (CP300) vers:intdot/>=7.80|<10.0

Siemens · SIPROTEC 5 7SK82 (CP100) vers:intdot/>=7.80|<8.90

Siemens · SIPROTEC 5 7SK82 (CP150) vers:intdot/<10.0

Siemens · SIPROTEC 5 7SK85 (CP300) vers:intdot/>=7.80|<10.0

Siemens · SIPROTEC 5 7SL82 (CP100) vers:intdot/>=7.80|<8.90

Siemens · SIPROTEC 5 7SL82 (CP150) vers:intdot/<10.0

Siemens · SIPROTEC 5 7SL86 (CP300) vers:intdot/>=7.80|<10.0

Siemens · SIPROTEC 5 7SL87 (CP300) vers:intdot/>=7.80|<10.0

Siemens · SIPROTEC 5 7SS85 (CP300) vers:intdot/>=7.80|<10.0

Siemens · SIPROTEC 5 7ST85 (CP300) vers:intdot/>=7.80|<10.0

Siemens · SIPROTEC 5 7ST85 (CP300) V9.6x vers:intdot/<9.68

Siemens · SIPROTEC 5 7ST86 (CP300) vers:intdot/<10.0

Siemens · SIPROTEC 5 7ST86 (CP300) V9.8x vers:intdot/<9.83

Siemens · SIPROTEC 5 7SX82 (CP150) vers:intdot/<10.0

Siemens · SIPROTEC 5 7SX85 (CP300) vers:intdot/<10.0

Siemens · SIPROTEC 5 7SY82 (CP150) vers:intdot/<10.0

Siemens · SIPROTEC 5 7UM85 (CP300) vers:intdot/>=7.80|<10.0

Siemens · SIPROTEC 5 7UT82 (CP100) vers:intdot/>=7.80|<8.90

Siemens · SIPROTEC 5 7UT82 (CP150) vers:intdot/<10.0

Siemens · SIPROTEC 5 7UT85 (CP300) vers:intdot/>=7.80|<10.0

Siemens · SIPROTEC 5 7UT86 (CP300) vers:intdot/>=7.80|<10.0

Siemens · SIPROTEC 5 7UT87 (CP300) vers:intdot/>=7.80|<10.0

Siemens · SIPROTEC 5 7VE85 (CP300) vers:intdot/>=7.80|<10.0

Siemens · SIPROTEC 5 7VK87 (CP300) vers:intdot/>=7.80|<10.0

Siemens · SIPROTEC 5 7VU85 (CP300) vers:intdot/<10.0

Siemens · SIPROTEC 5 Compact 7SX800 (CP050) vers:intdot/<10.0

Affected Sectors

Critical Manufacturing

Get alerted to advisories like this

OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.

Start free trial Learn more