SSA-439673 V1.0: Information Disclosure Vulnerability in SIPROTEC 5 Devices

Risk Summary

<p>An information disclosure vulnerability in SIPROTEC 5 products could allow an unauthenticated attacker to read device information.</p> <p>Only devices with the hardware variants CP050, CP100 and CP300 are affected. The DIGSI engineering tool can be used to identify the hardware version of your devices.</p> <p>Siemens has released updates for the affected products and recommends to update to the latest versions.</p>

Remediations

• Refer to Siemens ProductCERT advisory for patch and remediation guidance.

Affected Vendors

Affected Products (1)