CVE-2024-54017: SIPROTEC 5 6MD84 (CP300) 0 to before V11.0; +42 more affected products

Affected technology

SIPROTEC 5 6MD84 (CP300) · 0 to before V11.0
Siemens

SIPROTEC 5 6MD85 (CP300) · V7.80 to before V11.0
Siemens

SIPROTEC 5 6MD86 (CP300) · V7.80 to before V11.0
Siemens

SIPROTEC 5 6MD89 (CP300) · V7.80 to before V11.0
Siemens

SIPROTEC 5 6MU85 (CP300) · V7.80 to before V11.0
Siemens

SIPROTEC 5 7KE85 (CP300) · V7.80 to before V11.0
Siemens

SIPROTEC 5 7SA82 (CP100) · V7.80 to before *
Siemens

SIPROTEC 5 7SA82 (CP150) · 0 to before V11.0
Siemens

SIPROTEC 5 7SA86 (CP300) · V7.80 to before V11.0
Siemens

SIPROTEC 5 7SA87 (CP300) · V7.80 to before V11.0
Siemens

SIPROTEC 5 7SD82 (CP100) · V7.80 to before *
Siemens

SIPROTEC 5 7SD82 (CP150) · 0 to before V11.0
Siemens

SIPROTEC 5 7SD86 (CP300) · V7.80 to before V11.0
Siemens

SIPROTEC 5 7SD87 (CP300) · V7.80 to before V11.0
Siemens

SIPROTEC 5 7SJ81 (CP100) · V7.80 to before *
Siemens

SIPROTEC 5 7SJ81 (CP150) · 0 to before V11.0
Siemens

SIPROTEC 5 7SJ82 (CP100) · V7.80 to before *
Siemens

SIPROTEC 5 7SJ82 (CP150) · 0 to before V11.0
Siemens

SIPROTEC 5 7SJ85 (CP300) · V7.80 to before V11.0
Siemens

SIPROTEC 5 7SJ86 (CP300) · V7.80 to before V11.0
Siemens

SIPROTEC 5 7SK82 (CP100) · V7.80 to before *
Siemens

SIPROTEC 5 7SK82 (CP150) · 0 to before V11.0
Siemens

SIPROTEC 5 7SK85 (CP300) · V7.80 to before V11.0
Siemens

SIPROTEC 5 7SL82 (CP100) · V7.80 to before *
Siemens

SIPROTEC 5 7SL82 (CP150) · 0 to before V11.0
Siemens

SIPROTEC 5 7SL86 (CP300) · V7.80 to before V11.0
Siemens

SIPROTEC 5 7SL87 (CP300) · V7.80 to before V11.0
Siemens

SIPROTEC 5 7SS85 (CP300) · V7.80 to before V11.0
Siemens

SIPROTEC 5 7ST85 (CP300) · V7.80 to before V11.0
Siemens

SIPROTEC 5 7ST86 (CP300) · 0 to before V11.0
Siemens

SIPROTEC 5 7SX82 (CP150) · 0 to before V11.0
Siemens

SIPROTEC 5 7SX85 (CP300) · 0 to before V11.0
Siemens

SIPROTEC 5 7SY82 (CP150) · 0 to before V11.0
Siemens

SIPROTEC 5 7UM85 (CP300) · V7.80 to before V11.0
Siemens

SIPROTEC 5 7UT82 (CP100) · V7.80 to before *
Siemens

SIPROTEC 5 7UT82 (CP150) · 0 to before V11.0
Siemens

SIPROTEC 5 7UT85 (CP300) · V7.80 to before V11.0
Siemens

SIPROTEC 5 7UT86 (CP300) · V7.80 to before V11.0
Siemens

SIPROTEC 5 7UT87 (CP300) · V7.80 to before V11.0
Siemens

SIPROTEC 5 7VE85 (CP300) · V7.80 to before V11.0
Siemens

SIPROTEC 5 7VK87 (CP300) · V7.80 to before V11.0
Siemens

SIPROTEC 5 7VU85 (CP300) · 0 to before V11.0
Siemens

SIPROTEC 5 Compact 7SX800 (CP050) · 0 to before V11.0
Siemens

Description’s affected range: versions < V11.0), SIPROTEC 5 6MD85 (CP200) (All versions), SIPROTEC 5 6MD85 (CP300) (All versions >= V7.80 < V11.0), SIPROTEC 5 6MD86 (CP200) (All ve

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Network (remote) · No privileges required · No user interaction required

What an attacker can do

An unauthenticated remote attacker could brute force a session identifier and gain read access to limited information from the web server without authorization. Vendor/CNA’s CVSS 4.0 assessment (base score 6.9/10) rates confidentiality impact as low; integrity and availability impact as none.