SSA-673996 V1.3 (Last Update: 2025-12-09): Buffer Overflow Vulnerability in Third-Party Component in SICAM and SITIPE Products

Risk Summary

<p>Multiple SICAM products are affected by buffer overflow vulnerability in the IEC 61850 Client libraries from Triangle MicroWorks that could allow an unauthenticated remote attacker to create a denial of service condition by sending specially crafted MMS messages.</p> <p>Affected SICAM and SITIPE products:</p> <ul> <li>SICAM A8000 Device firmware <ul> <li>ET85 for CP-8000/CP-8021/CP-8022</li> <li>ETI5 for CP-8031/CP-8050</li> </ul></li> <li>SICAM EGS Device firmware <ul> <li>ETI5</li> </ul></li> <li>SICAM S8000 <ul> <li>ETI5</li> </ul></li> <li>SICAM SCC</li> <li>SITIPE AT</li> </ul> <p>Siemens has released new versions for the affected products and recommends to update to the latest versions.</p>

Remediations

• Refer to Siemens ProductCERT advisory for patch and remediation guidance.

Affected Vendors

Affected Products (1)