CVE-2022-45044

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-45044
A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V9.50), SIPROTEC 5 6MD85 (CP200) (All versions), SIPROTEC 5 6MD85 (CP300) (All versions < V9.50), SIPROTEC 5 6MD86 (CP200) (All versions), SIPROTEC 5 6MD86 (CP300) (All versions < V9.50), SIPROTEC 5 6MD89 (CP300) (All versions < V9.64), SIPROTEC 5 6MU85 (CP300) (All versions < V9.50), SIPROTEC 5 7KE85 (CP200) (All versions), SIPROTEC 5 7KE85 (CP300) (All versions < V9.64), SIPROTEC 5 7SA82 (CP100) (All versions), SIPROTEC 5 7SA82 (CP150) (All versions < V9.50), SIPROTEC 5 7SA84 (CP200) (All versions), SIPROTEC 5 7SA86 (CP200) (All versions), SIPROTEC 5 7SA86 (CP300) (All versions < V9.50), SIPROTEC 5 7SA87 (CP200) (All versions), SIPROTEC 5 7SA87 (CP300) (All versions < V9.50), SIPROTEC 5 7SD82 (CP100) (All versions), SIPROTEC 5 7SD82 (CP150) (All versions < V9.50), SIPROTEC 5 7SD84 (CP200) (All versions), SIPROTEC 5 7SD86 (CP200) (All versions), SIPROTEC 5 7SD86 (CP300) (All versions < V9.50), SIPROTEC 5 7SD87 (CP200) (All versions), SIPROTEC 5 7SD87 (CP300) (All versions < V9.50), SIPROTEC 5 7SJ81 (CP100) (All versions), SIPROTEC 5 7SJ81 (CP150) (All versions < V9.50), SIPROTEC 5 7SJ82 (CP100) (All versions), SIPROTEC 5 7SJ82 (CP150) (All versions < V9.50), SIPROTEC 5 7SJ85 (CP200) (All versions), SIPROTEC 5 7SJ85 (CP300) (All versions < V9.50), SIPROTEC 5 7SJ86 (CP200) (All versions), SIPROTEC 5 7SJ86 (CP300) (All versions < V9.50), SIPROTEC 5 7SK82 (CP100) (All versions), SIPROTEC 5 7SK82 (CP150) (All versions < V9.50), SIPROTEC 5 7SK85 (CP200) (All versions), SIPROTEC 5 7SK85 (CP300) (All versions < V9.50), SIPROTEC 5 7SL82 (CP100) (All versions), SIPROTEC 5 7SL82 (CP150) (All versions < V9.50), SIPROTEC 5 7SL86 (CP200) (All versions), SIPROTEC 5 7SL86 (CP300) (All versions < V9.50), SIPROTEC 5 7SL87 (CP200) (All versions), SIPROTEC 5 7SL87 (CP300) (All versions < V9.50), SIPROTEC 5 7SS85 (CP200) (All versions), SIPROTEC 5 7SS85 (CP300) (All versions < V9.50), SIPROTEC 5 7ST85 (CP200) (All versions), SIPROTEC 5 7ST85 (CP300) (All versions < V9.64), SIPROTEC 5 7ST86 (CP300) (All versions < V9.64), SIPROTEC 5 7SX82 (CP150) (All versions < V9.50), SIPROTEC 5 7SX85 (CP300) (All versions < V9.50), SIPROTEC 5 7UM85 (CP300) (All versions < V9.50), SIPROTEC 5 7UT82 (CP100) (All versions), SIPROTEC 5 7UT82 (CP150) (All versions < V9.50), SIPROTEC 5 7UT85 (CP200) (All versions), SIPROTEC 5 7UT85 (CP300) (All versions < V9.50), SIPROTEC 5 7UT86 (CP200) (All versions), SIPROTEC 5 7UT86 (CP300) (All versions < V9.50), SIPROTEC 5 7UT87 (CP200) (All versions), SIPROTEC 5 7UT87 (CP300) (All versions < V9.50), SIPROTEC 5 7VE85 (CP300) (All versions < V9.50), SIPROTEC 5 7VK87 (CP200) (All versions), SIPROTEC 5 7VK87 (CP300) (All versions < V9.50), SIPROTEC 5 7VU85 (CP300) (All versions < V9.50), SIPROTEC 5 Communication Module ETH-BA-2EL (All versions < V9.50 installed on CP150 and CP300 devices), SIPROTEC 5 Communication Module ETH-BA-2EL (All versions installed on CP100 and CP200 devices), SIPROTEC 5 Communication Module ETH-BB-2FO (All versions < V9.50 installed on CP150 and CP300 devices), SIPROTEC 5 Communication Module ETH-BB-2FO (All versions installed on CP100 and CP200 devices), SIPROTEC 5 Communication Module ETH-BD-2FO (All versions < V9.50), SIPROTEC 5 Compact 7SX800 (CP050) (All versions < V9.50). Affected devices do not properly restrict secure client-initiated renegotiations within the SSL and TLS protocols. This could allow an attacker to create a denial of service condition on the ports 443/tcp and 4443/tcp for the duration of the attack.

5.3 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact LOW

Scope UNCHANGED

References
Link Resource
https://cert-portal.siemens.com/productcert/html/ssa-552874.html
https://cert-portal.siemens.com/productcert/pdf/ssa-552874.pdf Mitigation Vendor Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:siemens:siprotec_5_6md85_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_6md85:cp200:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:siemens:siprotec_5_6md85_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_6md85:cp300:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:siemens:siprotec_5_6md86_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_6md86:cp200:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:siemens:siprotec_5_6md86_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_6md86:cp300:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:siemens:siprotec_5_6md89_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_6md89:cp300:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:siemens:siprotec_5_6mu85_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_6mu85:cp200:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:siemens:siprotec_5_6mu85_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_6mu85:cp300:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:siemens:siprotec_5_7ke85_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_7ke85:cp200:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
cpe:2.3:o:siemens:siprotec_5_7ke85_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_7ke85:cp300:*:*:*:*:*:*:*

Configuration 10 (hide)

AND
cpe:2.3:o:siemens:siprotec_5_7sa82_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_7sa82:cp100:*:*:*:*:*:*:*

Configuration 11 (hide)

AND
cpe:2.3:o:siemens:siprotec_5_7sa82_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_7sa82:cp150:*:*:*:*:*:*:*

Configuration 12 (hide)

AND
cpe:2.3:o:siemens:siprotec_5_7sa86_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_7sa86:cp200:*:*:*:*:*:*:*

Configuration 13 (hide)

AND
cpe:2.3:o:siemens:siprotec_5_7sa86_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_7sa86:cp300:*:*:*:*:*:*:*

Configuration 14 (hide)

AND
cpe:2.3:o:siemens:siprotec_5_7sa87_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_7sa87:cp200:*:*:*:*:*:*:*

Configuration 15 (hide)

AND
cpe:2.3:o:siemens:siprotec_5_7sa87_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_7sa87:cp300:*:*:*:*:*:*:*

Configuration 16 (hide)

AND
cpe:2.3:o:siemens:siprotec_5_7sd82_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_7sd82:cp100:*:*:*:*:*:*:*

Configuration 17 (hide)

AND
cpe:2.3:o:siemens:siprotec_5_7sd82_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_7sd82:cp150:*:*:*:*:*:*:*

Configuration 18 (hide)

AND
cpe:2.3:o:siemens:siprotec_5_7sd86_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_7sd86:cp200:*:*:*:*:*:*:*

Configuration 19 (hide)

AND
cpe:2.3:o:siemens:siprotec_5_7sd86_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_7sd86:cp300:*:*:*:*:*:*:*

Configuration 20 (hide)

AND
cpe:2.3:o:siemens:siprotec_5_7sd87_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_7sd87:cp200:*:*:*:*:*:*:*

Configuration 21 (hide)

AND
cpe:2.3:o:siemens:siprotec_5_7sd87_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_7sd87:cp300:*:*:*:*:*:*:*

Configuration 22 (hide)

AND
cpe:2.3:o:siemens:siprotec_5_7sj81_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_7sj81:cp100:*:*:*:*:*:*:*

Configuration 23 (hide)

AND
cpe:2.3:o:siemens:siprotec_5_7sj81_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_7sj81:cp150:*:*:*:*:*:*:*

Configuration 24 (hide)

AND
cpe:2.3:o:siemens:siprotec_5_7sj82_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_7sj82:cp100:*:*:*:*:*:*:*

Configuration 25 (hide)

AND
cpe:2.3:h:siemens:siprotec_5_7sj82:cp150:*:*:*:*:*:*:*
cpe:2.3:o:siemens:siprotec_5_7sj82_firmware:-:*:*:*:*:*:*:*

Configuration 26 (hide)

AND
cpe:2.3:h:siemens:siprotec_5_7sj85:cp200:*:*:*:*:*:*:*
cpe:2.3:o:siemens:siprotec_5_7sj85_firmware:-:*:*:*:*:*:*:*

Configuration 27 (hide)

AND
cpe:2.3:h:siemens:siprotec_5_7sj85:cp300:*:*:*:*:*:*:*
cpe:2.3:o:siemens:siprotec_5_7sj85_firmware:-:*:*:*:*:*:*:*

Configuration 28 (hide)

AND
cpe:2.3:h:siemens:siprotec_5_7sj86:cp200:*:*:*:*:*:*:*
cpe:2.3:o:siemens:siprotec_5_7sj86_firmware:-:*:*:*:*:*:*:*

Configuration 29 (hide)

AND
cpe:2.3:h:siemens:siprotec_5_7sj86:cp300:*:*:*:*:*:*:*
cpe:2.3:o:siemens:siprotec_5_7sj86_firmware:-:*:*:*:*:*:*:*

Configuration 30 (hide)

AND
cpe:2.3:h:siemens:siprotec_5_7sk82:cp100:*:*:*:*:*:*:*
cpe:2.3:o:siemens:siprotec_5_7sk82_firmware:-:*:*:*:*:*:*:*

Configuration 31 (hide)

AND
cpe:2.3:h:siemens:siprotec_5_7sk82:cp150:*:*:*:*:*:*:*
cpe:2.3:o:siemens:siprotec_5_7sk82_firmware:-:*:*:*:*:*:*:*

Configuration 32 (hide)

AND
cpe:2.3:h:siemens:siprotec_5_7sk85:cp200:*:*:*:*:*:*:*
cpe:2.3:o:siemens:siprotec_5_7sk85_firmware:-:*:*:*:*:*:*:*

Configuration 33 (hide)

AND
cpe:2.3:o:siemens:siprotec_5_7sk85_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_7sk85:cp300:*:*:*:*:*:*:*

Configuration 34 (hide)

AND
cpe:2.3:o:siemens:siprotec_5_7sl82_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_7sl82:cp100:*:*:*:*:*:*:*

Configuration 35 (hide)

AND
cpe:2.3:o:siemens:siprotec_5_7sl82_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_7sl82:cp150:*:*:*:*:*:*:*

Configuration 36 (hide)

AND
cpe:2.3:o:siemens:siprotec_5_7sl86_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_7sl86:cp200:*:*:*:*:*:*:*

Configuration 37 (hide)

AND
cpe:2.3:o:siemens:siprotec_5_7sl86_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_7sl86:cp300:*:*:*:*:*:*:*

Configuration 38 (hide)

AND
cpe:2.3:o:siemens:siprotec_5_7sl87_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_7sl87:cp200:*:*:*:*:*:*:*

Configuration 39 (hide)

AND
cpe:2.3:o:siemens:siprotec_5_7sl87_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_7sl87:cp300:*:*:*:*:*:*:*

Configuration 40 (hide)

AND
cpe:2.3:o:siemens:siprotec_5_7ss85_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_7ss85:cp200:*:*:*:*:*:*:*

Configuration 41 (hide)

AND
cpe:2.3:o:siemens:siprotec_5_7ss85_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_7ss85:cp300:*:*:*:*:*:*:*

Configuration 42 (hide)

AND
cpe:2.3:o:siemens:siprotec_5_7st85_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_7st85:cp200:*:*:*:*:*:*:*

Configuration 43 (hide)

AND
cpe:2.3:o:siemens:siprotec_5_7st85_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_7st85:cp300:*:*:*:*:*:*:*

Configuration 44 (hide)

AND
cpe:2.3:o:siemens:siprotec_5_7sx85_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_7sx85:cp300:*:*:*:*:*:*:*

Configuration 45 (hide)

AND
cpe:2.3:o:siemens:siprotec_5_7um85_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_7um85:cp300:*:*:*:*:*:*:*

Configuration 46 (hide)

AND
cpe:2.3:o:siemens:siprotec_5_7ut82_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_7ut82:cp100:*:*:*:*:*:*:*

Configuration 47 (hide)

AND
cpe:2.3:o:siemens:siprotec_5_7ut82_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_7ut82:cp150:*:*:*:*:*:*:*

Configuration 48 (hide)

AND
cpe:2.3:o:siemens:siprotec_5_7ut85_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_7ut85:cp200:*:*:*:*:*:*:*

Configuration 49 (hide)

AND
cpe:2.3:o:siemens:siprotec_5_7ut85_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_7ut85:cp300:*:*:*:*:*:*:*

Configuration 50 (hide)

AND
cpe:2.3:o:siemens:siprotec_5_7ut86_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_7ut86:cp200:*:*:*:*:*:*:*

Configuration 51 (hide)

AND
cpe:2.3:o:siemens:siprotec_5_7ut86_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_7ut86:cp300:*:*:*:*:*:*:*

Configuration 52 (hide)

AND
cpe:2.3:o:siemens:siprotec_5_7ut87_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_7ut87:cp200:*:*:*:*:*:*:*

Configuration 53 (hide)

AND
cpe:2.3:o:siemens:siprotec_5_7ut87_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_7ut87:cp300:*:*:*:*:*:*:*

Configuration 54 (hide)

AND
cpe:2.3:o:siemens:siprotec_5_7ve85_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_7ve85:cp300:*:*:*:*:*:*:*

Configuration 55 (hide)

AND
cpe:2.3:o:siemens:siprotec_5_7vk87_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_7vk87:cp200:*:*:*:*:*:*:*

Configuration 56 (hide)

AND
cpe:2.3:o:siemens:siprotec_5_7vk87_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_7vk87:cp300:*:*:*:*:*:*:*

Configuration 57 (hide)

AND
cpe:2.3:o:siemens:siprotec_5_communication_module_ethba2el_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_communication_module_ethba2el:-:*:*:*:*:*:*:*

Configuration 58 (hide)

AND
cpe:2.3:o:siemens:siprotec_5_communication_module_ethbb2fo_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_communication_module_ethbb2fo:-:*:*:*:*:*:*:*

Configuration 59 (hide)

AND
cpe:2.3:o:siemens:siprotec_5_communication_module_ethbd2fo_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_communication_module_ethbd2fo:-:*:*:*:*:*:*:*

Configuration 60 (hide)

AND
cpe:2.3:o:siemens:siprotec_5_compact_7sx800_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_compact_7sx800:cp050:*:*:*:*:*:*:*
History

12 Mar 2024, 11:15

Type Values Removed Values Added
Summary (en) A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V9.50), SIPROTEC 5 6MD85 (CP200) (All versions), SIPROTEC 5 6MD85 (CP300) (All versions < V9.50), SIPROTEC 5 6MD86 (CP200) (All versions), SIPROTEC 5 6MD86 (CP300) (All versions < V9.50), SIPROTEC 5 6MD89 (CP300) (All versions < V9.60), SIPROTEC 5 6MU85 (CP300) (All versions < V9.50), SIPROTEC 5 7KE85 (CP200) (All versions), SIPROTEC 5 7KE85 (CP300) (All versions < V9.60), SIPROTEC 5 7SA82 (CP100) (All versions), SIPROTEC 5 7SA82 (CP150) (All versions < V9.50), SIPROTEC 5 7SA84 (CP200) (All versions), SIPROTEC 5 7SA86 (CP200) (All versions), SIPROTEC 5 7SA86 (CP300) (All versions < V9.50), SIPROTEC 5 7SA87 (CP200) (All versions), SIPROTEC 5 7SA87 (CP300) (All versions < V9.50), SIPROTEC 5 7SD82 (CP100) (All versions), SIPROTEC 5 7SD82 (CP150) (All versions < V9.50), SIPROTEC 5 7SD84 (CP200) (All versions), SIPROTEC 5 7SD86 (CP200) (All versions), SIPROTEC 5 7SD86 (CP300) (All versions < V9.50), SIPROTEC 5 7SD87 (CP200) (All versions), SIPROTEC 5 7SD87 (CP300) (All versions < V9.50), SIPROTEC 5 7SJ81 (CP100) (All versions), SIPROTEC 5 7SJ81 (CP150) (All versions < V9.50), SIPROTEC 5 7SJ82 (CP100) (All versions), SIPROTEC 5 7SJ82 (CP150) (All versions < V9.50), SIPROTEC 5 7SJ85 (CP200) (All versions), SIPROTEC 5 7SJ85 (CP300) (All versions < V9.50), SIPROTEC 5 7SJ86 (CP200) (All versions), SIPROTEC 5 7SJ86 (CP300) (All versions < V9.50), SIPROTEC 5 7SK82 (CP100) (All versions), SIPROTEC 5 7SK82 (CP150) (All versions < V9.50), SIPROTEC 5 7SK85 (CP200) (All versions), SIPROTEC 5 7SK85 (CP300) (All versions < V9.50), SIPROTEC 5 7SL82 (CP100) (All versions), SIPROTEC 5 7SL82 (CP150) (All versions < V9.50), SIPROTEC 5 7SL86 (CP200) (All versions), SIPROTEC 5 7SL86 (CP300) (All versions < V9.50), SIPROTEC 5 7SL87 (CP200) (All versions), SIPROTEC 5 7SL87 (CP300) (All versions < V9.50), SIPROTEC 5 7SS85 (CP200) (All versions), SIPROTEC 5 7SS85 (CP300) (All versions < V9.50), SIPROTEC 5 7ST85 (CP200) (All versions), SIPROTEC 5 7ST85 (CP300) (All versions < V9.60), SIPROTEC 5 7ST86 (CP300) (All versions < V9.60), SIPROTEC 5 7SX82 (CP150) (All versions < V9.50), SIPROTEC 5 7SX85 (CP300) (All versions < V9.50), SIPROTEC 5 7UM85 (CP300) (All versions < V9.50), SIPROTEC 5 7UT82 (CP100) (All versions), SIPROTEC 5 7UT82 (CP150) (All versions < V9.50), SIPROTEC 5 7UT85 (CP200) (All versions), SIPROTEC 5 7UT85 (CP300) (All versions < V9.50), SIPROTEC 5 7UT86 (CP200) (All versions), SIPROTEC 5 7UT86 (CP300) (All versions < V9.50), SIPROTEC 5 7UT87 (CP200) (All versions), SIPROTEC 5 7UT87 (CP300) (All versions < V9.50), SIPROTEC 5 7VE85 (CP300) (All versions < V9.50), SIPROTEC 5 7VK87 (CP200) (All versions), SIPROTEC 5 7VK87 (CP300) (All versions < V9.50), SIPROTEC 5 7VU85 (CP300) (All versions < V9.50), SIPROTEC 5 Communication Module ETH-BA-2EL (All versions < V9.50 installed on CP150 and CP300 devices), SIPROTEC 5 Communication Module ETH-BA-2EL (All versions installed on CP100 and CP200 devices), SIPROTEC 5 Communication Module ETH-BB-2FO (All versions < V9.50 installed on CP150 and CP300 devices), SIPROTEC 5 Communication Module ETH-BB-2FO (All versions installed on CP100 and CP200 devices), SIPROTEC 5 Communication Module ETH-BD-2FO (All versions < V9.50), SIPROTEC 5 Compact 7SX800 (CP050) (All versions < V9.50). Affected devices do not properly restrict secure client-initiated renegotiations within the SSL and TLS protocols. This could allow an attacker to create a denial of service condition on the ports 443/tcp and 4443/tcp for the duration of the attack. (en) A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V9.50), SIPROTEC 5 6MD85 (CP200) (All versions), SIPROTEC 5 6MD85 (CP300) (All versions < V9.50), SIPROTEC 5 6MD86 (CP200) (All versions), SIPROTEC 5 6MD86 (CP300) (All versions < V9.50), SIPROTEC 5 6MD89 (CP300) (All versions < V9.64), SIPROTEC 5 6MU85 (CP300) (All versions < V9.50), SIPROTEC 5 7KE85 (CP200) (All versions), SIPROTEC 5 7KE85 (CP300) (All versions < V9.64), SIPROTEC 5 7SA82 (CP100) (All versions), SIPROTEC 5 7SA82 (CP150) (All versions < V9.50), SIPROTEC 5 7SA84 (CP200) (All versions), SIPROTEC 5 7SA86 (CP200) (All versions), SIPROTEC 5 7SA86 (CP300) (All versions < V9.50), SIPROTEC 5 7SA87 (CP200) (All versions), SIPROTEC 5 7SA87 (CP300) (All versions < V9.50), SIPROTEC 5 7SD82 (CP100) (All versions), SIPROTEC 5 7SD82 (CP150) (All versions < V9.50), SIPROTEC 5 7SD84 (CP200) (All versions), SIPROTEC 5 7SD86 (CP200) (All versions), SIPROTEC 5 7SD86 (CP300) (All versions < V9.50), SIPROTEC 5 7SD87 (CP200) (All versions), SIPROTEC 5 7SD87 (CP300) (All versions < V9.50), SIPROTEC 5 7SJ81 (CP100) (All versions), SIPROTEC 5 7SJ81 (CP150) (All versions < V9.50), SIPROTEC 5 7SJ82 (CP100) (All versions), SIPROTEC 5 7SJ82 (CP150) (All versions < V9.50), SIPROTEC 5 7SJ85 (CP200) (All versions), SIPROTEC 5 7SJ85 (CP300) (All versions < V9.50), SIPROTEC 5 7SJ86 (CP200) (All versions), SIPROTEC 5 7SJ86 (CP300) (All versions < V9.50), SIPROTEC 5 7SK82 (CP100) (All versions), SIPROTEC 5 7SK82 (CP150) (All versions < V9.50), SIPROTEC 5 7SK85 (CP200) (All versions), SIPROTEC 5 7SK85 (CP300) (All versions < V9.50), SIPROTEC 5 7SL82 (CP100) (All versions), SIPROTEC 5 7SL82 (CP150) (All versions < V9.50), SIPROTEC 5 7SL86 (CP200) (All versions), SIPROTEC 5 7SL86 (CP300) (All versions < V9.50), SIPROTEC 5 7SL87 (CP200) (All versions), SIPROTEC 5 7SL87 (CP300) (All versions < V9.50), SIPROTEC 5 7SS85 (CP200) (All versions), SIPROTEC 5 7SS85 (CP300) (All versions < V9.50), SIPROTEC 5 7ST85 (CP200) (All versions), SIPROTEC 5 7ST85 (CP300) (All versions < V9.64), SIPROTEC 5 7ST86 (CP300) (All versions < V9.64), SIPROTEC 5 7SX82 (CP150) (All versions < V9.50), SIPROTEC 5 7SX85 (CP300) (All versions < V9.50), SIPROTEC 5 7UM85 (CP300) (All versions < V9.50), SIPROTEC 5 7UT82 (CP100) (All versions), SIPROTEC 5 7UT82 (CP150) (All versions < V9.50), SIPROTEC 5 7UT85 (CP200) (All versions), SIPROTEC 5 7UT85 (CP300) (All versions < V9.50), SIPROTEC 5 7UT86 (CP200) (All versions), SIPROTEC 5 7UT86 (CP300) (All versions < V9.50), SIPROTEC 5 7UT87 (CP200) (All versions), SIPROTEC 5 7UT87 (CP300) (All versions < V9.50), SIPROTEC 5 7VE85 (CP300) (All versions < V9.50), SIPROTEC 5 7VK87 (CP200) (All versions), SIPROTEC 5 7VK87 (CP300) (All versions < V9.50), SIPROTEC 5 7VU85 (CP300) (All versions < V9.50), SIPROTEC 5 Communication Module ETH-BA-2EL (All versions < V9.50 installed on CP150 and CP300 devices), SIPROTEC 5 Communication Module ETH-BA-2EL (All versions installed on CP100 and CP200 devices), SIPROTEC 5 Communication Module ETH-BB-2FO (All versions < V9.50 installed on CP150 and CP300 devices), SIPROTEC 5 Communication Module ETH-BB-2FO (All versions installed on CP100 and CP200 devices), SIPROTEC 5 Communication Module ETH-BD-2FO (All versions < V9.50), SIPROTEC 5 Compact 7SX800 (CP050) (All versions < V9.50). Affected devices do not properly restrict secure client-initiated renegotiations within the SSL and TLS protocols. This could allow an attacker to create a denial of service condition on the ports 443/tcp and 4443/tcp for the duration of the attack.
References
  • () https://cert-portal.siemens.com/productcert/html/ssa-552874.html -

12 Sep 2023, 10:15

Type Values Removed Values Added
Summary A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V9.50), SIPROTEC 5 6MD85 (CP200) (All versions), SIPROTEC 5 6MD85 (CP300) (All versions < V9.50), SIPROTEC 5 6MD86 (CP200) (All versions), SIPROTEC 5 6MD86 (CP300) (All versions < V9.50), SIPROTEC 5 6MD89 (CP300) (All versions), SIPROTEC 5 6MU85 (CP300) (All versions < V9.50), SIPROTEC 5 7KE85 (CP200) (All versions), SIPROTEC 5 7KE85 (CP300) (All versions), SIPROTEC 5 7SA82 (CP100) (All versions), SIPROTEC 5 7SA82 (CP150) (All versions < V9.50), SIPROTEC 5 7SA84 (CP200) (All versions), SIPROTEC 5 7SA86 (CP200) (All versions), SIPROTEC 5 7SA86 (CP300) (All versions < V9.50), SIPROTEC 5 7SA87 (CP200) (All versions), SIPROTEC 5 7SA87 (CP300) (All versions < V9.50), SIPROTEC 5 7SD82 (CP100) (All versions), SIPROTEC 5 7SD82 (CP150) (All versions < V9.50), SIPROTEC 5 7SD84 (CP200) (All versions), SIPROTEC 5 7SD86 (CP200) (All versions), SIPROTEC 5 7SD86 (CP300) (All versions < V9.50), SIPROTEC 5 7SD87 (CP200) (All versions), SIPROTEC 5 7SD87 (CP300) (All versions < V9.50), SIPROTEC 5 7SJ81 (CP100) (All versions), SIPROTEC 5 7SJ81 (CP150) (All versions < V9.50), SIPROTEC 5 7SJ82 (CP100) (All versions), SIPROTEC 5 7SJ82 (CP150) (All versions < V9.50), SIPROTEC 5 7SJ85 (CP200) (All versions), SIPROTEC 5 7SJ85 (CP300) (All versions < V9.50), SIPROTEC 5 7SJ86 (CP200) (All versions), SIPROTEC 5 7SJ86 (CP300) (All versions < V9.50), SIPROTEC 5 7SK82 (CP100) (All versions), SIPROTEC 5 7SK82 (CP150) (All versions < V9.50), SIPROTEC 5 7SK85 (CP200) (All versions), SIPROTEC 5 7SK85 (CP300) (All versions < V9.50), SIPROTEC 5 7SL82 (CP100) (All versions), SIPROTEC 5 7SL82 (CP150) (All versions < V9.50), SIPROTEC 5 7SL86 (CP200) (All versions), SIPROTEC 5 7SL86 (CP300) (All versions < V9.50), SIPROTEC 5 7SL87 (CP200) (All versions), SIPROTEC 5 7SL87 (CP300) (All versions < V9.50), SIPROTEC 5 7SS85 (CP200) (All versions), SIPROTEC 5 7SS85 (CP300) (All versions < V9.50), SIPROTEC 5 7ST85 (CP200) (All versions), SIPROTEC 5 7ST85 (CP300) (All versions), SIPROTEC 5 7ST86 (CP300) (All versions), SIPROTEC 5 7SX82 (CP150) (All versions < V9.50), SIPROTEC 5 7SX85 (CP300) (All versions < V9.50), SIPROTEC 5 7UM85 (CP300) (All versions < V9.50), SIPROTEC 5 7UT82 (CP100) (All versions), SIPROTEC 5 7UT82 (CP150) (All versions < V9.50), SIPROTEC 5 7UT85 (CP200) (All versions), SIPROTEC 5 7UT85 (CP300) (All versions < V9.50), SIPROTEC 5 7UT86 (CP200) (All versions), SIPROTEC 5 7UT86 (CP300) (All versions < V9.50), SIPROTEC 5 7UT87 (CP200) (All versions), SIPROTEC 5 7UT87 (CP300) (All versions < V9.50), SIPROTEC 5 7VE85 (CP300) (All versions < V9.50), SIPROTEC 5 7VK87 (CP200) (All versions), SIPROTEC 5 7VK87 (CP300) (All versions < V9.50), SIPROTEC 5 7VU85 (CP300) (All versions < V9.50), SIPROTEC 5 Communication Module ETH-BA-2EL (All versions < V9.50 installed on CP150 and CP300 devices), SIPROTEC 5 Communication Module ETH-BA-2EL (All versions installed on CP100 and CP200 devices), SIPROTEC 5 Communication Module ETH-BB-2FO (All versions < V9.50 installed on CP150 and CP300 devices), SIPROTEC 5 Communication Module ETH-BB-2FO (All versions installed on CP100 and CP200 devices), SIPROTEC 5 Communication Module ETH-BD-2FO (All versions < V9.50), SIPROTEC 5 Compact 7SX800 (CP050) (All versions < V9.50). Affected devices do not properly restrict secure client-initiated renegotiations within the SSL and TLS protocols. This could allow an attacker to create a denial of service condition on the ports 443/tcp and 4443/tcp for the duration of the attack. A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V9.50), SIPROTEC 5 6MD85 (CP200) (All versions), SIPROTEC 5 6MD85 (CP300) (All versions < V9.50), SIPROTEC 5 6MD86 (CP200) (All versions), SIPROTEC 5 6MD86 (CP300) (All versions < V9.50), SIPROTEC 5 6MD89 (CP300) (All versions < V9.60), SIPROTEC 5 6MU85 (CP300) (All versions < V9.50), SIPROTEC 5 7KE85 (CP200) (All versions), SIPROTEC 5 7KE85 (CP300) (All versions < V9.60), SIPROTEC 5 7SA82 (CP100) (All versions), SIPROTEC 5 7SA82 (CP150) (All versions < V9.50), SIPROTEC 5 7SA84 (CP200) (All versions), SIPROTEC 5 7SA86 (CP200) (All versions), SIPROTEC 5 7SA86 (CP300) (All versions < V9.50), SIPROTEC 5 7SA87 (CP200) (All versions), SIPROTEC 5 7SA87 (CP300) (All versions < V9.50), SIPROTEC 5 7SD82 (CP100) (All versions), SIPROTEC 5 7SD82 (CP150) (All versions < V9.50), SIPROTEC 5 7SD84 (CP200) (All versions), SIPROTEC 5 7SD86 (CP200) (All versions), SIPROTEC 5 7SD86 (CP300) (All versions < V9.50), SIPROTEC 5 7SD87 (CP200) (All versions), SIPROTEC 5 7SD87 (CP300) (All versions < V9.50), SIPROTEC 5 7SJ81 (CP100) (All versions), SIPROTEC 5 7SJ81 (CP150) (All versions < V9.50), SIPROTEC 5 7SJ82 (CP100) (All versions), SIPROTEC 5 7SJ82 (CP150) (All versions < V9.50), SIPROTEC 5 7SJ85 (CP200) (All versions), SIPROTEC 5 7SJ85 (CP300) (All versions < V9.50), SIPROTEC 5 7SJ86 (CP200) (All versions), SIPROTEC 5 7SJ86 (CP300) (All versions < V9.50), SIPROTEC 5 7SK82 (CP100) (All versions), SIPROTEC 5 7SK82 (CP150) (All versions < V9.50), SIPROTEC 5 7SK85 (CP200) (All versions), SIPROTEC 5 7SK85 (CP300) (All versions < V9.50), SIPROTEC 5 7SL82 (CP100) (All versions), SIPROTEC 5 7SL82 (CP150) (All versions < V9.50), SIPROTEC 5 7SL86 (CP200) (All versions), SIPROTEC 5 7SL86 (CP300) (All versions < V9.50), SIPROTEC 5 7SL87 (CP200) (All versions), SIPROTEC 5 7SL87 (CP300) (All versions < V9.50), SIPROTEC 5 7SS85 (CP200) (All versions), SIPROTEC 5 7SS85 (CP300) (All versions < V9.50), SIPROTEC 5 7ST85 (CP200) (All versions), SIPROTEC 5 7ST85 (CP300) (All versions < V9.60), SIPROTEC 5 7ST86 (CP300) (All versions < V9.60), SIPROTEC 5 7SX82 (CP150) (All versions < V9.50), SIPROTEC 5 7SX85 (CP300) (All versions < V9.50), SIPROTEC 5 7UM85 (CP300) (All versions < V9.50), SIPROTEC 5 7UT82 (CP100) (All versions), SIPROTEC 5 7UT82 (CP150) (All versions < V9.50), SIPROTEC 5 7UT85 (CP200) (All versions), SIPROTEC 5 7UT85 (CP300) (All versions < V9.50), SIPROTEC 5 7UT86 (CP200) (All versions), SIPROTEC 5 7UT86 (CP300) (All versions < V9.50), SIPROTEC 5 7UT87 (CP200) (All versions), SIPROTEC 5 7UT87 (CP300) (All versions < V9.50), SIPROTEC 5 7VE85 (CP300) (All versions < V9.50), SIPROTEC 5 7VK87 (CP200) (All versions), SIPROTEC 5 7VK87 (CP300) (All versions < V9.50), SIPROTEC 5 7VU85 (CP300) (All versions < V9.50), SIPROTEC 5 Communication Module ETH-BA-2EL (All versions < V9.50 installed on CP150 and CP300 devices), SIPROTEC 5 Communication Module ETH-BA-2EL (All versions installed on CP100 and CP200 devices), SIPROTEC 5 Communication Module ETH-BB-2FO (All versions < V9.50 installed on CP150 and CP300 devices), SIPROTEC 5 Communication Module ETH-BB-2FO (All versions installed on CP100 and CP200 devices), SIPROTEC 5 Communication Module ETH-BD-2FO (All versions < V9.50), SIPROTEC 5 Compact 7SX800 (CP050) (All versions < V9.50). Affected devices do not properly restrict secure client-initiated renegotiations within the SSL and TLS protocols. This could allow an attacker to create a denial of service condition on the ports 443/tcp and 4443/tcp for the duration of the attack.

09 May 2023, 13:15

Type Values Removed Values Added
Summary A vulnerability has been identified in SIPROTEC 5 6MD85 devices (CPU variant CP200) (All versions), SIPROTEC 5 6MD85 devices (CPU variant CP300) (All versions), SIPROTEC 5 6MD86 devices (CPU variant CP200) (All versions), SIPROTEC 5 6MD86 devices (CPU variant CP300) (All versions), SIPROTEC 5 6MD89 devices (CPU variant CP300) (All versions), SIPROTEC 5 6MU85 devices (CPU variant CP300) (All versions), SIPROTEC 5 7KE85 devices (CPU variant CP200) (All versions), SIPROTEC 5 7KE85 devices (CPU variant CP300) (All versions), SIPROTEC 5 7SA82 devices (CPU variant CP100) (All versions), SIPROTEC 5 7SA82 devices (CPU variant CP150) (All versions), SIPROTEC 5 7SA86 devices (CPU variant CP200) (All versions), SIPROTEC 5 7SA86 devices (CPU variant CP300) (All versions), SIPROTEC 5 7SA87 devices (CPU variant CP200) (All versions), SIPROTEC 5 7SA87 devices (CPU variant CP300) (All versions), SIPROTEC 5 7SD82 devices (CPU variant CP100) (All versions), SIPROTEC 5 7SD82 devices (CPU variant CP150) (All versions), SIPROTEC 5 7SD86 devices (CPU variant CP200) (All versions), SIPROTEC 5 7SD86 devices (CPU variant CP300) (All versions), SIPROTEC 5 7SD87 devices (CPU variant CP200) (All versions), SIPROTEC 5 7SD87 devices (CPU variant CP300) (All versions), SIPROTEC 5 7SJ81 devices (CPU variant CP100) (All versions), SIPROTEC 5 7SJ81 devices (CPU variant CP150) (All versions), SIPROTEC 5 7SJ82 devices (CPU variant CP100) (All versions), SIPROTEC 5 7SJ82 devices (CPU variant CP150) (All versions), SIPROTEC 5 7SJ85 devices (CPU variant CP200) (All versions), SIPROTEC 5 7SJ85 devices (CPU variant CP300) (All versions), SIPROTEC 5 7SJ86 devices (CPU variant CP200) (All versions), SIPROTEC 5 7SJ86 devices (CPU variant CP300) (All versions), SIPROTEC 5 7SK82 devices (CPU variant CP100) (All versions), SIPROTEC 5 7SK82 devices (CPU variant CP150) (All versions), SIPROTEC 5 7SK85 devices (CPU variant CP200) (All versions), SIPROTEC 5 7SK85 devices (CPU variant CP300) (All versions), SIPROTEC 5 7SL82 devices (CPU variant CP100) (All versions), SIPROTEC 5 7SL82 devices (CPU variant CP150) (All versions), SIPROTEC 5 7SL86 devices (CPU variant CP200) (All versions), SIPROTEC 5 7SL86 devices (CPU variant CP300) (All versions), SIPROTEC 5 7SL87 devices (CPU variant CP200) (All versions), SIPROTEC 5 7SL87 devices (CPU variant CP300) (All versions), SIPROTEC 5 7SS85 devices (CPU variant CP200) (All versions), SIPROTEC 5 7SS85 devices (CPU variant CP300) (All versions), SIPROTEC 5 7ST85 devices (CPU variant CP200) (All versions), SIPROTEC 5 7ST85 devices (CPU variant CP300) (All versions), SIPROTEC 5 7SX85 devices (CPU variant CP300) (All versions), SIPROTEC 5 7UM85 devices (CPU variant CP300) (All versions), SIPROTEC 5 7UT82 devices (CPU variant CP100) (All versions), SIPROTEC 5 7UT82 devices (CPU variant CP150) (All versions), SIPROTEC 5 7UT85 devices (CPU variant CP200) (All versions), SIPROTEC 5 7UT85 devices (CPU variant CP300) (All versions), SIPROTEC 5 7UT86 devices (CPU variant CP200) (All versions), SIPROTEC 5 7UT86 devices (CPU variant CP300) (All versions), SIPROTEC 5 7UT87 devices (CPU variant CP200) (All versions), SIPROTEC 5 7UT87 devices (CPU variant CP300) (All versions), SIPROTEC 5 7VE85 devices (CPU variant CP300) (All versions), SIPROTEC 5 7VK87 devices (CPU variant CP200) (All versions), SIPROTEC 5 7VK87 devices (CPU variant CP300) (All versions), SIPROTEC 5 Communication Module ETH-BA-2EL (All versions), SIPROTEC 5 Communication Module ETH-BB-2FO (All versions), SIPROTEC 5 Communication Module ETH-BD-2FO (All versions), SIPROTEC 5 Compact 7SX800 devices (CPU variant CP050) (All versions). Affected devices do not properly restrict secure client-initiated renegotiations within the SSL and TLS protocols. This could allow an attacker to create a denial of service condition on the ports 443/tcp and 4443/tcp for the duration of the attack. A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V9.50), SIPROTEC 5 6MD85 (CP200) (All versions), SIPROTEC 5 6MD85 (CP300) (All versions < V9.50), SIPROTEC 5 6MD86 (CP200) (All versions), SIPROTEC 5 6MD86 (CP300) (All versions < V9.50), SIPROTEC 5 6MD89 (CP300) (All versions), SIPROTEC 5 6MU85 (CP300) (All versions < V9.50), SIPROTEC 5 7KE85 (CP200) (All versions), SIPROTEC 5 7KE85 (CP300) (All versions), SIPROTEC 5 7SA82 (CP100) (All versions), SIPROTEC 5 7SA82 (CP150) (All versions < V9.50), SIPROTEC 5 7SA84 (CP200) (All versions), SIPROTEC 5 7SA86 (CP200) (All versions), SIPROTEC 5 7SA86 (CP300) (All versions < V9.50), SIPROTEC 5 7SA87 (CP200) (All versions), SIPROTEC 5 7SA87 (CP300) (All versions < V9.50), SIPROTEC 5 7SD82 (CP100) (All versions), SIPROTEC 5 7SD82 (CP150) (All versions < V9.50), SIPROTEC 5 7SD84 (CP200) (All versions), SIPROTEC 5 7SD86 (CP200) (All versions), SIPROTEC 5 7SD86 (CP300) (All versions < V9.50), SIPROTEC 5 7SD87 (CP200) (All versions), SIPROTEC 5 7SD87 (CP300) (All versions < V9.50), SIPROTEC 5 7SJ81 (CP100) (All versions), SIPROTEC 5 7SJ81 (CP150) (All versions < V9.50), SIPROTEC 5 7SJ82 (CP100) (All versions), SIPROTEC 5 7SJ82 (CP150) (All versions < V9.50), SIPROTEC 5 7SJ85 (CP200) (All versions), SIPROTEC 5 7SJ85 (CP300) (All versions < V9.50), SIPROTEC 5 7SJ86 (CP200) (All versions), SIPROTEC 5 7SJ86 (CP300) (All versions < V9.50), SIPROTEC 5 7SK82 (CP100) (All versions), SIPROTEC 5 7SK82 (CP150) (All versions < V9.50), SIPROTEC 5 7SK85 (CP200) (All versions), SIPROTEC 5 7SK85 (CP300) (All versions < V9.50), SIPROTEC 5 7SL82 (CP100) (All versions), SIPROTEC 5 7SL82 (CP150) (All versions < V9.50), SIPROTEC 5 7SL86 (CP200) (All versions), SIPROTEC 5 7SL86 (CP300) (All versions < V9.50), SIPROTEC 5 7SL87 (CP200) (All versions), SIPROTEC 5 7SL87 (CP300) (All versions < V9.50), SIPROTEC 5 7SS85 (CP200) (All versions), SIPROTEC 5 7SS85 (CP300) (All versions < V9.50), SIPROTEC 5 7ST85 (CP200) (All versions), SIPROTEC 5 7ST85 (CP300) (All versions), SIPROTEC 5 7ST86 (CP300) (All versions), SIPROTEC 5 7SX82 (CP150) (All versions < V9.50), SIPROTEC 5 7SX85 (CP300) (All versions < V9.50), SIPROTEC 5 7UM85 (CP300) (All versions < V9.50), SIPROTEC 5 7UT82 (CP100) (All versions), SIPROTEC 5 7UT82 (CP150) (All versions < V9.50), SIPROTEC 5 7UT85 (CP200) (All versions), SIPROTEC 5 7UT85 (CP300) (All versions < V9.50), SIPROTEC 5 7UT86 (CP200) (All versions), SIPROTEC 5 7UT86 (CP300) (All versions < V9.50), SIPROTEC 5 7UT87 (CP200) (All versions), SIPROTEC 5 7UT87 (CP300) (All versions < V9.50), SIPROTEC 5 7VE85 (CP300) (All versions < V9.50), SIPROTEC 5 7VK87 (CP200) (All versions), SIPROTEC 5 7VK87 (CP300) (All versions < V9.50), SIPROTEC 5 7VU85 (CP300) (All versions < V9.50), SIPROTEC 5 Communication Module ETH-BA-2EL (All versions < V9.50 installed on CP150 and CP300 devices), SIPROTEC 5 Communication Module ETH-BA-2EL (All versions installed on CP100 and CP200 devices), SIPROTEC 5 Communication Module ETH-BB-2FO (All versions < V9.50 installed on CP150 and CP300 devices), SIPROTEC 5 Communication Module ETH-BB-2FO (All versions installed on CP100 and CP200 devices), SIPROTEC 5 Communication Module ETH-BD-2FO (All versions < V9.50), SIPROTEC 5 Compact 7SX800 (CP050) (All versions < V9.50). Affected devices do not properly restrict secure client-initiated renegotiations within the SSL and TLS protocols. This could allow an attacker to create a denial of service condition on the ports 443/tcp and 4443/tcp for the duration of the attack.
CVSS v2 : unknown
v3 : 7.5 		v2 : unknown
v3 : 5.3

16 Dec 2022, 16:49

Type Values Removed Values Added
References (CONFIRM) https://cert-portal.siemens.com/productcert/pdf/ssa-552874.pdf - (CONFIRM) https://cert-portal.siemens.com/productcert/pdf/ssa-552874.pdf - Mitigation, Vendor Advisory
CWE CWE-400
CPE cpe:2.3:o:siemens:siprotec_5_6md85_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_7sa82:cp100:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_7ss85:cp300:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_compact_7sx800:cp050:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_7ut82:cp150:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_7sl87:cp200:*:*:*:*:*:*:*
cpe:2.3:o:siemens:siprotec_5_7sj86_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_7sl82:cp150:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_7ut82:cp100:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_7ut85:cp200:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_7sl86:cp200:*:*:*:*:*:*:*
cpe:2.3:o:siemens:siprotec_5_7sx85_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_6mu85:cp200:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_7sx85:cp300:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_7sl86:cp300:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_7vk87:cp200:*:*:*:*:*:*:*
cpe:2.3:o:siemens:siprotec_5_7sk82_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_7ut86:cp300:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_7sj86:cp200:*:*:*:*:*:*:*
cpe:2.3:o:siemens:siprotec_5_7sa87_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_7sa86:cp200:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_7sj81:cp150:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_7sk82:cp100:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_7ut87:cp200:*:*:*:*:*:*:*
cpe:2.3:o:siemens:siprotec_5_7sd87_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_7sa86:cp300:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_7sd82:cp100:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_7ss85:cp200:*:*:*:*:*:*:*
cpe:2.3:o:siemens:siprotec_5_7sk85_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:siprotec_5_6mu85_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:siprotec_5_7sl87_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_7sd86:cp200:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_7ve85:cp300:*:*:*:*:*:*:*
cpe:2.3:o:siemens:siprotec_5_compact_7sx800_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:siprotec_5_7ut86_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:siprotec_5_7sa86_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_6md86:cp200:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_7sd86:cp300:*:*:*:*:*:*:*
cpe:2.3:o:siemens:siprotec_5_communication_module_ethbb2fo_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_7sj81:cp100:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_7vk87:cp300:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_7sk85:cp300:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_7st85:cp200:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_7sd87:cp200:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_6mu85:cp300:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_7sl82:cp100:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_communication_module_ethbb2fo:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:siprotec_5_6md86_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_7sk85:cp200:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_6md86:cp300:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_7sa82:cp150:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_7sl87:cp300:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_communication_module_ethba2el:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_7um85:cp300:*:*:*:*:*:*:*
cpe:2.3:o:siemens:siprotec_5_7ss85_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_7sd82:cp150:*:*:*:*:*:*:*
cpe:2.3:o:siemens:siprotec_5_7sd86_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:siprotec_5_7ut85_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:siprotec_5_7ut87_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:siprotec_5_7ut82_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_7sj85:cp200:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_7sk82:cp150:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_7sa87:cp200:*:*:*:*:*:*:*
cpe:2.3:o:siemens:siprotec_5_7sa82_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_7sj86:cp300:*:*:*:*:*:*:*
cpe:2.3:o:siemens:siprotec_5_7vk87_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_7ut86:cp200:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_7sa87:cp300:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_7sd87:cp300:*:*:*:*:*:*:*
cpe:2.3:o:siemens:siprotec_5_7um85_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:siprotec_5_7sl82_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:siprotec_5_7ke85_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:siprotec_5_communication_module_ethba2el_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:siprotec_5_7sj82_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:siprotec_5_7sj85_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_7sj85:cp300:*:*:*:*:*:*:*
cpe:2.3:o:siemens:siprotec_5_7sl86_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_6md89:cp300:*:*:*:*:*:*:*
cpe:2.3:o:siemens:siprotec_5_7sd82_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_7sj82:cp150:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_6md85:cp300:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_7st85:cp300:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_7ke85:cp200:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_7ut87:cp300:*:*:*:*:*:*:*
cpe:2.3:o:siemens:siprotec_5_7st85_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_communication_module_ethbd2fo:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_7sj82:cp100:*:*:*:*:*:*:*
cpe:2.3:o:siemens:siprotec_5_7sj81_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_6md85:cp200:*:*:*:*:*:*:*
cpe:2.3:o:siemens:siprotec_5_communication_module_ethbd2fo_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_7ke85:cp300:*:*:*:*:*:*:*
cpe:2.3:o:siemens:siprotec_5_7ve85_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:siprotec_5_6md89_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siprotec_5_7ut85:cp300:*:*:*:*:*:*:*
First Time Siemens siprotec 5 Communication Module Ethbb2fo
Siemens siprotec 5 6md86
Siemens siprotec 5 7sk82
Siemens siprotec 5 Communication Module Ethbd2fo
Siemens siprotec 5 6mu85 Firmware
Siemens siprotec 5 7ke85
Siemens siprotec 5 7sj81
Siemens siprotec 5 7sj82
Siemens siprotec 5 7st85
Siemens siprotec 5 7sx85
Siemens siprotec 5 7um85 Firmware
Siemens siprotec 5 7sa86
Siemens siprotec 5 6md89
Siemens siprotec 5 7sa86 Firmware
Siemens siprotec 5 Communication Module Ethba2el
Siemens siprotec 5 6md85
Siemens siprotec 5 7sk85
Siemens siprotec 5 7ut87
Siemens siprotec 5 7sd87
Siemens siprotec 5 7sd87 Firmware
Siemens siprotec 5 Compact 7sx800 Firmware
Siemens siprotec 5 Compact 7sx800
Siemens siprotec 5 Communication Module Ethba2el Firmware
Siemens siprotec 5 6md86 Firmware
Siemens siprotec 5 6md85 Firmware
Siemens siprotec 5 7ut87 Firmware
Siemens siprotec 5 7sl82 Firmware
Siemens siprotec 5 7sj81 Firmware
Siemens siprotec 5 7sa82
Siemens siprotec 5 7sx85 Firmware
Siemens siprotec 5 7sa82 Firmware
Siemens siprotec 5 7sl87
Siemens siprotec 5 7sa87
Siemens siprotec 5 7sk85 Firmware
Siemens siprotec 5 7st85 Firmware
Siemens siprotec 5 7sj85 Firmware
Siemens siprotec 5 6mu85
Siemens siprotec 5 7ss85
Siemens siprotec 5 7sd82
Siemens siprotec 5 7sj82 Firmware
Siemens siprotec 5 7ut82
Siemens siprotec 5 7sl82
Siemens siprotec 5 7sl86 Firmware
Siemens siprotec 5 7sj86 Firmware
Siemens siprotec 5 7sj85
Siemens siprotec 5 7ut86
Siemens siprotec 5 Communication Module Ethbd2fo Firmware
Siemens siprotec 5 7ss85 Firmware
Siemens
Siemens siprotec 5 7vk87 Firmware
Siemens siprotec 5 7sl87 Firmware
Siemens siprotec 5 7ut85
Siemens siprotec 5 7vk87
Siemens siprotec 5 7ut86 Firmware
Siemens siprotec 5 Communication Module Ethbb2fo Firmware
Siemens siprotec 5 7sd82 Firmware
Siemens siprotec 5 7ve85
Siemens siprotec 5 7ut82 Firmware
Siemens siprotec 5 6md89 Firmware
Siemens siprotec 5 7ve85 Firmware
Siemens siprotec 5 7sd86 Firmware
Siemens siprotec 5 7ut85 Firmware
Siemens siprotec 5 7ke85 Firmware
Siemens siprotec 5 7sd86
Siemens siprotec 5 7sk82 Firmware
Siemens siprotec 5 7sl86
Siemens siprotec 5 7sj86
Siemens siprotec 5 7um85
Siemens siprotec 5 7sa87 Firmware
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.5

13 Dec 2022, 16:52

Type Values Removed Values Added
New CVE
Information

Published : 2022-12-13 16:15

Updated : 2024-03-12 11:15

NVD link : CVE-2022-45044

Mitre link : CVE-2022-45044

CVE.ORG link : CVE-2022-45044

JSON object : View

Products Affected

siemens

  • siprotec_5_7sk85_firmware
  • siprotec_5_7ve85_firmware
  • siprotec_5_7sj86
  • siprotec_5_6md89
  • siprotec_5_7sa87_firmware
  • siprotec_5_7ut85
  • siprotec_5_7ut82
  • siprotec_5_7sl82_firmware
  • siprotec_5_7sd87_firmware
  • siprotec_5_7sj82
  • siprotec_5_6md89_firmware
  • siprotec_5_7sj81_firmware
  • siprotec_5_7ut87
  • siprotec_5_6md86_firmware
  • siprotec_5_7vk87_firmware
  • siprotec_5_communication_module_ethbb2fo_firmware
  • siprotec_5_7sl86
  • siprotec_5_7sk82
  • siprotec_5_7sd82
  • siprotec_5_6md85
  • siprotec_5_7sj86_firmware
  • siprotec_5_7sk85
  • siprotec_5_7um85_firmware
  • siprotec_5_7sl82
  • siprotec_5_communication_module_ethbd2fo_firmware
  • siprotec_5_7sd87
  • siprotec_5_7sa86
  • siprotec_5_7sk82_firmware
  • siprotec_5_7sa82
  • siprotec_5_7um85
  • siprotec_5_7ut82_firmware
  • siprotec_5_7ut86
  • siprotec_5_6mu85
  • siprotec_5_7ke85
  • siprotec_5_6mu85_firmware
  • siprotec_5_7st85_firmware
  • siprotec_5_7sx85_firmware
  • siprotec_5_7sd86_firmware
  • siprotec_5_7sa87
  • siprotec_5_7sj81
  • siprotec_5_7ut87_firmware
  • siprotec_5_7st85
  • siprotec_5_7sl86_firmware
  • siprotec_5_7sj85
  • siprotec_5_7sd82_firmware
  • siprotec_5_7sj82_firmware
  • siprotec_5_6md86
  • siprotec_5_7ke85_firmware
  • siprotec_5_7sj85_firmware
  • siprotec_5_7vk87
  • siprotec_5_communication_module_ethbd2fo
  • siprotec_5_compact_7sx800_firmware
  • siprotec_5_communication_module_ethbb2fo
  • siprotec_5_communication_module_ethba2el
  • siprotec_5_communication_module_ethba2el_firmware
  • siprotec_5_7ut85_firmware
  • siprotec_5_compact_7sx800
  • siprotec_5_7ve85
  • siprotec_5_7sl87
  • siprotec_5_6md85_firmware
  • siprotec_5_7sa86_firmware
  • siprotec_5_7sx85
  • siprotec_5_7sd86
  • siprotec_5_7sl87_firmware
  • siprotec_5_7sa82_firmware
  • siprotec_5_7ss85_firmware
  • siprotec_5_7ut86_firmware
  • siprotec_5_7ss85
CWE
CWE-400

Uncontrolled Resource Consumption