← CVE Intelligence

CVE-2023-28766

Siemens / SIPROTEC 5 6MD85 (CP300) PUBLISHED

Description (CNA)

A vulnerability has been identified in SIPROTEC 5 6MD85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 6MD86 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 6MD89 (CP300) (All versions >= V7.80 < V9.64), SIPROTEC 5 6MU85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7KE85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7SA82 (CP100) (All versions < V8.90), SIPROTEC 5 7SA82 (CP150) (All versions < V9.40), SIPROTEC 5 7SA86 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7SA87 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7SD82 (CP100) (All versions < V8.90), SIPROTEC 5 7SD82 (CP150) (All versions < V9.40), SIPROTEC 5 7SD86 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7SD87 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7SJ81 (CP100) (All versions < V8.89), SIPROTEC 5 7SJ81 (CP150) (All versions < V9.40), SIPROTEC 5 7SJ82 (CP100) (All versions < V8.89), SIPROTEC 5 7SJ82 (CP150) (All versions < V9.40), SIPROTEC 5 7SJ85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7SJ86 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7SK82 (CP100) (All versions < V8.89), SIPROTEC 5 7SK82 (CP150) (All versions < V9.40), SIPROTEC 5 7SK85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7SL82 (CP100) (All versions < V8.90), SIPROTEC 5 7SL82 (CP150) (All versions < V9.40), SIPROTEC 5 7SL86 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7SL87 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7SS85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7ST85 (CP300) (All versions >= V7.80 < V9.64), SIPROTEC 5 7ST86 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7SX82 (CP150) (All versions < V9.40), SIPROTEC 5 7SX85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7UM85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7UT82 (CP100) (All versions < V8.90), SIPROTEC 5 7UT82 (CP150) (All versions < V9.40), SIPROTEC 5 7UT85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7UT86 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7UT87 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7VE85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7VK87 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7VU85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 Communication Module ETH-BA-2EL (Rev.1) (All versions < V9.40 installed on CP150 and CP300 devices), SIPROTEC 5 Communication Module ETH-BA-2EL (Rev.1) (All versions < V8.89 installed on CP100 devices), SIPROTEC 5 Communication Module ETH-BB-2FO (Rev. 1) (All versions < V9.40 installed on CP150 and CP300 devices), SIPROTEC 5 Communication Module ETH-BB-2FO (Rev. 1) (All versions < V8.89 installed on CP100 devices), SIPROTEC 5 Communication Module ETH-BD-2FO (All versions < V9.40), SIPROTEC 5 Compact 7SX800 (CP050) (All versions < V9.40). Affected devices lack proper validation of http request parameters of the hosted web service. An unauthenticated remote attacker could send specially crafted packets that could cause denial of service condition of the target device.

Affected (CNA)

Vendor / productVersions
Siemens / SIPROTEC 5 6MD85 (CP300)affected V7.80 before V9.40
Siemens / SIPROTEC 5 6MD86 (CP300)affected V7.80 before V9.40
Siemens / SIPROTEC 5 6MD89 (CP300)affected V7.80 before V9.64
Siemens / SIPROTEC 5 6MU85 (CP300)affected V7.80 before V9.40
Siemens / SIPROTEC 5 7KE85 (CP300)affected V7.80 before V9.40
Siemens / SIPROTEC 5 7SA82 (CP100)affected 0 before V8.90
Siemens / SIPROTEC 5 7SA82 (CP150)affected 0 before V9.40
Siemens / SIPROTEC 5 7SA86 (CP300)affected V7.80 before V9.40
Siemens / SIPROTEC 5 7SA87 (CP300)affected V7.80 before V9.40
Siemens / SIPROTEC 5 7SD82 (CP100)affected 0 before V8.90
Siemens / SIPROTEC 5 7SD82 (CP150)affected 0 before V9.40
Siemens / SIPROTEC 5 7SD86 (CP300)affected V7.80 before V9.40
Siemens / SIPROTEC 5 7SD87 (CP300)affected V7.80 before V9.40
Siemens / SIPROTEC 5 7SJ81 (CP100)affected 0 before V8.89
Siemens / SIPROTEC 5 7SJ81 (CP150)affected 0 before V9.40
Siemens / SIPROTEC 5 7SJ82 (CP100)affected 0 before V8.89
Siemens / SIPROTEC 5 7SJ82 (CP150)affected 0 before V9.40
Siemens / SIPROTEC 5 7SJ85 (CP300)affected V7.80 before V9.40
Siemens / SIPROTEC 5 7SJ86 (CP300)affected V7.80 before V9.40
Siemens / SIPROTEC 5 7SK82 (CP100)affected 0 before V8.89
Siemens / SIPROTEC 5 7SK82 (CP150)affected 0 before V9.40
Siemens / SIPROTEC 5 7SK85 (CP300)affected V7.80 before V9.40
Siemens / SIPROTEC 5 7SL82 (CP100)affected 0 before V8.90
Siemens / SIPROTEC 5 7SL82 (CP150)affected 0 before V9.40
Siemens / SIPROTEC 5 7SL86 (CP300)affected V7.80 before V9.40
Siemens / SIPROTEC 5 7SL87 (CP300)affected V7.80 before V9.40
Siemens / SIPROTEC 5 7SS85 (CP300)affected V7.80 before V9.40
Siemens / SIPROTEC 5 7ST85 (CP300)affected V7.80 before V9.64
Siemens / SIPROTEC 5 7ST86 (CP300)affected V7.80 before V9.40
Siemens / SIPROTEC 5 7SX82 (CP150)affected 0 before V9.40
Siemens / SIPROTEC 5 7SX85 (CP300)affected V7.80 before V9.40
Siemens / SIPROTEC 5 7UM85 (CP300)affected V7.80 before V9.40
Siemens / SIPROTEC 5 7UT82 (CP100)affected 0 before V8.90
Siemens / SIPROTEC 5 7UT82 (CP150)affected 0 before V9.40
Siemens / SIPROTEC 5 7UT85 (CP300)affected V7.80 before V9.40
Siemens / SIPROTEC 5 7UT86 (CP300)affected V7.80 before V9.40
Siemens / SIPROTEC 5 7UT87 (CP300)affected V7.80 before V9.40
Siemens / SIPROTEC 5 7VE85 (CP300)affected V7.80 before V9.40
Siemens / SIPROTEC 5 7VK87 (CP300)affected V7.80 before V9.40
Siemens / SIPROTEC 5 7VU85 (CP300)affected V7.80 before V9.40
Siemens / SIPROTEC 5 Communication Module ETH-BA-2EL (Rev.1)affected 0 before V9.40
Siemens / SIPROTEC 5 Communication Module ETH-BA-2EL (Rev.1)affected 0 before V8.89
Siemens / SIPROTEC 5 Communication Module ETH-BB-2FO (Rev. 1)affected 0 before V9.40
Siemens / SIPROTEC 5 Communication Module ETH-BB-2FO (Rev. 1)affected 0 before V8.89
Siemens / SIPROTEC 5 Communication Module ETH-BD-2FOaffected 0 before V9.40
Siemens / SIPROTEC 5 Compact 7SX800 (CP050)affected 0 before V9.40

CWE

CWE-476

References

ADP enrichment

CVE

No English description supplied.