All the vulnerabilites related to siemens - siprotec_5_with_cpu_variant_cp300
Vulnerability from fkie_nvd
Published
2019-03-21 16:00
Modified
2024-11-21 03:52
Severity ?
5.9 (Medium) - CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Summary
A vulnerability has been identified in Firmware variant IEC 61850 for EN100 Ethernet module (All versions < V4.35), Firmware variant MODBUS TCP for EN100 Ethernet module (All versions), Firmware variant DNP3 TCP for EN100 Ethernet module (All versions), Firmware variant IEC104 for EN100 Ethernet module (All versions), Firmware variant Profinet IO for EN100 Ethernet module (All versions), SIPROTEC 5 relays with CPU variants CP300 and CP100 and the respective Ethernet communication modules (All versions < V7.82), SIPROTEC 5 relays with CPU variants CP200 and the respective Ethernet communication modules (All versions < V7.58). Specially crafted packets to port 102/tcp could cause a denial-of-service condition in the affected products. A manual restart is required to recover the EN100 module functionality of the affected devices. Successful exploitation requires an attacker with network access to send multiple packets to the affected products or modules. As a precondition the IEC 61850-MMS communication needs to be activated on the affected products or modules. No user interaction or privileges are required to exploit the vulnerability. The vulnerability could allow causing a Denial-of-Service condition of the network functionality of the device, compromising the availability of the system. At the time of advisory publication no public exploitation of this security vulnerability was known.
References
productcert@siemens.comhttps://cert-portal.siemens.com/productcert/pdf/ssa-104088.pdfVendor Advisory
af854a3a-2127-422b-91ae-364da2661108https://cert-portal.siemens.com/productcert/pdf/ssa-104088.pdfVendor Advisory
Impacted products
Vendor Product Version
siemens siprotec_5_with_cpu_variant_cp100 *
siemens siprotec_5_with_cpu_variant_cp200 *
siemens siprotec_5_with_cpu_variant_cp300 *
siemens 6md85 -
siemens 6md86 -
siemens 7ke85 -
siemens 7sa82 -
siemens 7sa86 -
siemens 7sa87 -
siemens 7sd82 -
siemens 7sd86 -
siemens 7sd87 -
siemens 7sj82 -
siemens 7sj85 -
siemens 7sj86 -
siemens 7sk82 -
siemens 7sk85 -
siemens 7sl82 -
siemens 7sl86 -
siemens 7sl87 -
siemens 7ss85 -
siemens 7um85 -
siemens 7ut82 -
siemens 7ut85 -
siemens 7ut86 -
siemens 7ut87 -
siemens 7vk87 -
siemens en100_ethernet_module_firmware -
siemens en100_ethernet_module_with_firmware_variant_dnp3_tcp -
siemens en100_ethernet_module_with_firmware_variant_iec_61850 4.35
siemens en100_ethernet_module_with_firmware_variant_iec104 -
siemens en100_ethernet_module_with_firmware_variant_modbus_tcp -
siemens en100_ethernet_module_with_firmware_variant_profinet_io -
siemens en100_ethernet_module -


To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:siemens:siprotec_5_with_cpu_variant_cp100:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "5702CB4F-7215-4E5D-99DF-457DE13F453E",
              "versionEndExcluding": "7.82",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:siemens:siprotec_5_with_cpu_variant_cp200:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "1D470323-A8F4-4029-93EC-C6FD86344CDD",
              "versionEndExcluding": "7.58",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:siemens:siprotec_5_with_cpu_variant_cp300:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "696274F6-2529-43ED-AD59-EE03B2412920",
              "versionEndExcluding": "7.82",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:siemens:6md85:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "23076116-128D-4366-B5BC-B965001FE356",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:siemens:6md86:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "3457758B-A04D-4544-B0FA-DF87AA11D8FE",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:siemens:7ke85:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "751F0BFE-216F-4620-BD5A-451B5F49C09C",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:siemens:7sa82:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "AF247CA0-37E1-40DF-96F5-9F00128EA250",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:siemens:7sa86:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "EDD3C99B-CDD8-4919-BE72-73814C2642A4",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:siemens:7sa87:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "DBE6CCA9-A246-4EB2-A57B-FE6823A9E3FD",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:siemens:7sd82:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "E11B4A68-F533-4AC0-80A9-7374FDFE2DEA",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:siemens:7sd86:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "73F8D692-F268-45A4-9348-C67890A58881",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:siemens:7sd87:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "3C5A3FFD-17AD-4820-97D3-2F093BD5F322",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:siemens:7sj82:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "5739872A-E271-48BB-ABB5-17608E81AE7A",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:siemens:7sj85:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "ECC6417D-2C81-4654-B7FF-6C3E1B709962",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:siemens:7sj86:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "C52A6630-46F3-4113-B5E8-F5BAB7801CB0",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:siemens:7sk82:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "088AC7F2-4FF3-4EF9-A111-D47DB859ECA1",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:siemens:7sk85:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "73DD95AC-9B8F-43CD-9483-2BB9C4E86376",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:siemens:7sl82:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "8A9F05D9-C1DF-4D73-8634-239ABFE526DB",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:siemens:7sl86:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "0C6662F7-5E3D-43A8-9984-EF1540BC917B",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:siemens:7sl87:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "E122323B-A42B-4DAB-A071-ACF76DC45E28",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:siemens:7ss85:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "5877387C-E05B-4231-9016-01FE7B197589",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:siemens:7um85:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "AAA9E810-2C00-4721-B3A6-E7CD7184BA24",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:siemens:7ut82:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "2E959A8E-21D1-4950-974B-A89693C14DC9",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:siemens:7ut85:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "DA075D19-21BF-4A7C-87B8-6A9D99799826",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:siemens:7ut86:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "7AC0D445-9A9B-4799-8B83-8B15821A6CC1",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:siemens:7ut87:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "D2A73860-76C5-435B-8150-1EABF644ADA0",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:siemens:7vk87:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "5D9FD3B7-C7F7-41C1-9290-411F9D912D00",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:siemens:en100_ethernet_module_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "04955058-63F4-41FE-9F38-C90D89795CD4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:siemens:en100_ethernet_module_with_firmware_variant_dnp3_tcp:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "90D74353-23C1-4FD7-A697-0303C778C2B2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:siemens:en100_ethernet_module_with_firmware_variant_iec_61850:4.35:*:*:*:*:*:*:*",
              "matchCriteriaId": "C8A66524-CF2E-4296-8795-DF2A1A2AA7D5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:siemens:en100_ethernet_module_with_firmware_variant_iec104:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "E7BCD7E1-C8FA-4403-964C-5B255030DE75",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:siemens:en100_ethernet_module_with_firmware_variant_modbus_tcp:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "9C9581F1-DF4A-4DF7-A445-4D943475E50B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:siemens:en100_ethernet_module_with_firmware_variant_profinet_io:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "40CEAECA-7A4C-4773-8A1B-9648F6A647B8",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:siemens:en100_ethernet_module:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "DAC429FD-7148-4A68-AA81-8FBADA588F4E",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A vulnerability has been identified in Firmware variant IEC 61850 for EN100 Ethernet module (All versions \u003c V4.35), Firmware variant MODBUS TCP for EN100 Ethernet module (All versions), Firmware variant DNP3 TCP for EN100 Ethernet module (All versions), Firmware variant IEC104 for EN100 Ethernet module (All versions), Firmware variant Profinet IO for EN100 Ethernet module (All versions), SIPROTEC 5 relays with CPU variants CP300 and CP100 and the respective Ethernet communication modules (All versions \u003c V7.82), SIPROTEC 5 relays with CPU variants CP200 and the respective Ethernet communication modules (All versions \u003c V7.58). Specially crafted packets to port 102/tcp could cause a denial-of-service condition in the affected products. A manual restart is required to recover the EN100 module functionality of the affected devices. Successful exploitation requires an attacker with network access to send multiple packets to the affected products or modules. As a precondition the IEC 61850-MMS communication needs to be activated on the affected products or modules. No user interaction or privileges are required to exploit the vulnerability. The vulnerability could allow causing a Denial-of-Service condition of the network functionality of the device, compromising the availability of the system. At the time of advisory publication no public exploitation of this security vulnerability was known."
    },
    {
      "lang": "es",
      "value": "Se ha identificado una vulnerabilidad en la variante de firmware IEC 61850 para el m\u00f3dulo de Ethernet EN100 (todas las versiones anteriores a la V4.35), la variante de firmware MODBUS TCP para el m\u00f3dulo de Ethernet EN100 (todas las versiones), la variante de firmware DNP3 TCP para el m\u00f3dulo de Ethernet EN100 (todas las versiones), la variante de firmware IEC104 para el m\u00f3dulo de Ethernet EN100 para el m\u00f3dulo de Ethernet (todas las versiones), la variante de firmware Profinet IO para el m\u00f3dulo de Ethernet EN100 para el m\u00f3dulo de Ethernet (todas las versiones), los relays SIPROTEC 5 con las variantes de CPU CP300 y CP100 y los respectivos m\u00f3dulos de comunicaci\u00f3n Ethernet (todas las versiones anteriores a la V7.82) y los relays SIPROTEC 5 con las variantes de CPU CP200 y los respectivos m\u00f3dulos de comunicaci\u00f3n Ethernet (todas las versiones anteriores a la V7.58). Los paquetes especialmente manipulados enviados al puerto 102/tcp podr\u00edan provocar una denegaci\u00f3n de servicio (DoS) en los productos afectados. Se necesita un reinicio manual para recuperar la funcionalidad del m\u00f3dulo EN100 de los dispositivos afectados. Su explotaci\u00f3n con \u00e9xito requiere que un atacante con acceso de red env\u00ede m\u00faltiples paquetes a los productos o m\u00f3dulos afectados. Como prerrequisito, la comunicaci\u00f3n IEC 61850-MMS necesita activarse en los productos o m\u00f3dulos afectados. No se requiere interacci\u00f3n o privilegios del usuario para explotar esta vulnerabilidad. La vulnerabilidad podr\u00eda permitir una denegaci\u00f3n de servicio (DoS) en la funcionalidad de red del dispositivo, comprometiendo la disponibilidad del sistema. En el momento de la publicaci\u00f3n del advisory, no se conoce ninguna explotaci\u00f3n p\u00fablica de la vulnerabilidad de seguridad."
    }
  ],
  "id": "CVE-2018-16563",
  "lastModified": "2024-11-21T03:52:59.153",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "MEDIUM",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 4.3,
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 8.6,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "cvssData": {
          "attackComplexity": "HIGH",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 5.9,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "version": "3.0"
        },
        "exploitabilityScore": 2.2,
        "impactScore": 3.6,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2019-03-21T16:00:22.420",
  "references": [
    {
      "source": "productcert@siemens.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-104088.pdf"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-104088.pdf"
    }
  ],
  "sourceIdentifier": "productcert@siemens.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

Vulnerability from fkie_nvd
Published
2021-09-14 11:15
Modified
2024-11-21 06:14
Severity ?
7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Summary
A vulnerability has been identified in SIPROTEC 5 relays with CPU variants CP050 (All versions < V8.80), SIPROTEC 5 relays with CPU variants CP100 (All versions < V8.80), SIPROTEC 5 relays with CPU variants CP300 (All versions < V8.80). Received webpackets are not properly processed. An unauthenticated remote attacker with access to any of the Ethernet interfaces could send specially crafted packets to force a restart of the target device.
References
productcert@siemens.comhttps://cert-portal.siemens.com/productcert/pdf/ssa-500748.pdfPatch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108https://cert-portal.siemens.com/productcert/pdf/ssa-500748.pdfPatch, Vendor Advisory
Impacted products
Vendor Product Version
siemens siprotec_5_with_cpu_variant_cp050 *
siemens siprotec_5_with_cpu_variant_cp100 *
siemens siprotec_5_with_cpu_variant_cp300 *


To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:siemens:siprotec_5_with_cpu_variant_cp050:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "9755644C-32A9-468D-A7AD-D12B8C1924D9",
              "versionEndExcluding": "8.80",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:siemens:siprotec_5_with_cpu_variant_cp100:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "27B5603D-CA86-440D-9CBE-A6F50AA1ADE1",
              "versionEndExcluding": "8.80",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:siemens:siprotec_5_with_cpu_variant_cp300:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "23382FCC-10D8-4DEC-A6B1-9B39D8988299",
              "versionEndExcluding": "8.80",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A vulnerability has been identified in SIPROTEC 5 relays with CPU variants CP050 (All versions \u003c V8.80), SIPROTEC 5 relays with CPU variants CP100 (All versions \u003c V8.80), SIPROTEC 5 relays with CPU variants CP300 (All versions \u003c V8.80). Received webpackets are not properly processed. An unauthenticated remote attacker with access to any of the Ethernet interfaces could send specially crafted packets to force a restart of the target device."
    },
    {
      "lang": "es",
      "value": "Se ha identificado una vulnerabilidad en los rel\u00e9s SIPROTEC 5 con variantes de CPUCP050 (Todas las versiones anteriores a V8.80), rel\u00e9s SIPROTEC 5 con variantes de CPUCP100 (Todas las versiones anteriores a V8.80), rel\u00e9s SIPROTEC 5 con variantes de CPUCP300 (Todas las versiones anteriores a V8.80). Los paquetes web recibidos no se procesan correctamente. Un atacante remoto no autenticado con acceso a cualquiera de las interfaces Ethernet podr\u00eda enviar paquetes especialmente dise\u00f1ados para forzar el reinicio del dispositivo de destino"
    }
  ],
  "id": "CVE-2021-37206",
  "lastModified": "2024-11-21T06:14:51.697",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 5.0,
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 7.5,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 3.6,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2021-09-14T11:15:26.547",
  "references": [
    {
      "source": "productcert@siemens.com",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-500748.pdf"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-500748.pdf"
    }
  ],
  "sourceIdentifier": "productcert@siemens.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ],
      "source": "productcert@siemens.com",
      "type": "Primary"
    }
  ]
}

Vulnerability from fkie_nvd
Published
2021-09-14 11:15
Modified
2024-11-21 06:09
Severity ?
7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Summary
A vulnerability has been identified in SIPROTEC 5 relays with CPU variants CP050 (All versions < V8.80), SIPROTEC 5 relays with CPU variants CP100 (All versions < V8.80), SIPROTEC 5 relays with CPU variants CP300 (All versions < V8.80). Specially crafted packets sent to port 4443/tcp could cause a Denial-of-Service condition.
References
productcert@siemens.comhttps://cert-portal.siemens.com/productcert/pdf/ssa-847986.pdfPatch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108https://cert-portal.siemens.com/productcert/pdf/ssa-847986.pdfPatch, Vendor Advisory
Impacted products
Vendor Product Version
siemens siprotec_5_with_cpu_variant_cp050 *
siemens siprotec_5_with_cpu_variant_cp100 *
siemens siprotec_5_with_cpu_variant_cp300 *


To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:siemens:siprotec_5_with_cpu_variant_cp050:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "9755644C-32A9-468D-A7AD-D12B8C1924D9",
              "versionEndExcluding": "8.80",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:siemens:siprotec_5_with_cpu_variant_cp100:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "27B5603D-CA86-440D-9CBE-A6F50AA1ADE1",
              "versionEndExcluding": "8.80",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:siemens:siprotec_5_with_cpu_variant_cp300:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "23382FCC-10D8-4DEC-A6B1-9B39D8988299",
              "versionEndExcluding": "8.80",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A vulnerability has been identified in SIPROTEC 5 relays with CPU variants CP050 (All versions \u003c V8.80), SIPROTEC 5 relays with CPU variants CP100 (All versions \u003c V8.80), SIPROTEC 5 relays with CPU variants CP300 (All versions \u003c V8.80). Specially crafted packets sent to port 4443/tcp could cause a Denial-of-Service condition."
    },
    {
      "lang": "es",
      "value": "Se ha identificado una vulnerabilidad en los rel\u00e9s SIPROTEC 5 con variantes de CPU CP050 (Todas las versiones anteriores a V8.80), rel\u00e9s SIPROTEC 5 con variantes de CPU CP100 (Todas las versiones anteriores a V8.80), rel\u00e9s SIPROTEC 5 con variantes de CPU CP300 (Todas las versiones anteriores a V8.80). Los paquetes especialmente dise\u00f1ados enviados al puerto 4443/tcp podr\u00edan causar una condici\u00f3n de denegaci\u00f3n de servicio"
    }
  ],
  "id": "CVE-2021-33720",
  "lastModified": "2024-11-21T06:09:26.700",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 5.0,
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 7.5,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 3.6,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2021-09-14T11:15:24.540",
  "references": [
    {
      "source": "productcert@siemens.com",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-847986.pdf"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-847986.pdf"
    }
  ],
  "sourceIdentifier": "productcert@siemens.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-120"
        }
      ],
      "source": "productcert@siemens.com",
      "type": "Secondary"
    },
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-120"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

Vulnerability from fkie_nvd
Published
2021-09-14 11:15
Modified
2024-11-21 06:09
Severity ?
9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Summary
A vulnerability has been identified in SIPROTEC 5 relays with CPU variants CP050 (All versions < V8.80), SIPROTEC 5 relays with CPU variants CP100 (All versions < V8.80), SIPROTEC 5 relays with CPU variants CP300 (All versions < V8.80). Specially crafted packets sent to port 4443/tcp could cause a Denial-of-Service condition or potential remote code execution.
References
productcert@siemens.comhttps://cert-portal.siemens.com/productcert/pdf/ssa-847986.pdfPatch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108https://cert-portal.siemens.com/productcert/pdf/ssa-847986.pdfPatch, Vendor Advisory
Impacted products
Vendor Product Version
siemens siprotec_5_with_cpu_variant_cp050 *
siemens siprotec_5_with_cpu_variant_cp100 *
siemens siprotec_5_with_cpu_variant_cp300 *


To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:siemens:siprotec_5_with_cpu_variant_cp050:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "9755644C-32A9-468D-A7AD-D12B8C1924D9",
              "versionEndExcluding": "8.80",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:siemens:siprotec_5_with_cpu_variant_cp100:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "27B5603D-CA86-440D-9CBE-A6F50AA1ADE1",
              "versionEndExcluding": "8.80",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:siemens:siprotec_5_with_cpu_variant_cp300:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "23382FCC-10D8-4DEC-A6B1-9B39D8988299",
              "versionEndExcluding": "8.80",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A vulnerability has been identified in SIPROTEC 5 relays with CPU variants CP050 (All versions \u003c V8.80), SIPROTEC 5 relays with CPU variants CP100 (All versions \u003c V8.80), SIPROTEC 5 relays with CPU variants CP300 (All versions \u003c V8.80). Specially crafted packets sent to port 4443/tcp could cause a Denial-of-Service condition or potential remote code execution."
    },
    {
      "lang": "es",
      "value": "Se ha identificado una vulnerabilidad en los rel\u00e9s SIPROTEC 5 con variantes de CPU CP050 (Todas las versiones anteriores a V8.80), rel\u00e9s SIPROTEC 5 con variantes de CPU CP100 (Todas las versiones anteriores a V8.80), rel\u00e9s SIPROTEC 5 con variantes de CPU CP300 (Todas las versiones anteriores a V8.80). Los paquetes especialmente dise\u00f1ados enviados al puerto 4443/tcp podr\u00edan causar una condici\u00f3n de denegaci\u00f3n de servicio o una potencial ejecuci\u00f3n de c\u00f3digo remota"
    }
  ],
  "id": "CVE-2021-33719",
  "lastModified": "2024-11-21T06:09:26.580",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 7.5,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 9.8,
          "baseSeverity": "CRITICAL",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 5.9,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2021-09-14T11:15:24.447",
  "references": [
    {
      "source": "productcert@siemens.com",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-847986.pdf"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-847986.pdf"
    }
  ],
  "sourceIdentifier": "productcert@siemens.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-120"
        }
      ],
      "source": "productcert@siemens.com",
      "type": "Primary"
    }
  ]
}

cve-2018-16563
Vulnerability from cvelistv5
Published
2019-03-21 14:57
Modified
2024-08-05 10:24
Severity ?
Summary
A vulnerability has been identified in Firmware variant IEC 61850 for EN100 Ethernet module (All versions < V4.35), Firmware variant MODBUS TCP for EN100 Ethernet module (All versions), Firmware variant DNP3 TCP for EN100 Ethernet module (All versions), Firmware variant IEC104 for EN100 Ethernet module (All versions), Firmware variant Profinet IO for EN100 Ethernet module (All versions), SIPROTEC 5 relays with CPU variants CP300 and CP100 and the respective Ethernet communication modules (All versions < V7.82), SIPROTEC 5 relays with CPU variants CP200 and the respective Ethernet communication modules (All versions < V7.58). Specially crafted packets to port 102/tcp could cause a denial-of-service condition in the affected products. A manual restart is required to recover the EN100 module functionality of the affected devices. Successful exploitation requires an attacker with network access to send multiple packets to the affected products or modules. As a precondition the IEC 61850-MMS communication needs to be activated on the affected products or modules. No user interaction or privileges are required to exploit the vulnerability. The vulnerability could allow causing a Denial-of-Service condition of the network functionality of the device, compromising the availability of the system. At the time of advisory publication no public exploitation of this security vulnerability was known.
References
https://cert-portal.siemens.com/productcert/pdf/ssa-104088.pdfx_refsource_CONFIRM
Impacted products
Vendor Product Version
Siemens Firmware variant MODBUS TCP for EN100 Ethernet module Version: All versions
Siemens Firmware variant DNP3 TCP for EN100 Ethernet module Version: All versions
Siemens Firmware variant IEC104 for EN100 Ethernet module Version: All versions
Siemens Firmware variant Profinet IO for EN100 Ethernet module Version: All versions
Siemens SIPROTEC 5 relays with CPU variants CP300 and CP100 and the respective Ethernet communication modules Version: All versions < V7.82
Siemens SIPROTEC 5 relays with CPU variants CP200 and the respective Ethernet communication modules Version: All versions < V7.58
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T10:24:32.996Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-104088.pdf"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firmware variant IEC 61850 for EN100 Ethernet module",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V4.35"
            }
          ]
        },
        {
          "product": "Firmware variant MODBUS TCP for EN100 Ethernet module",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions"
            }
          ]
        },
        {
          "product": "Firmware variant DNP3 TCP for EN100 Ethernet module",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions"
            }
          ]
        },
        {
          "product": "Firmware variant IEC104 for EN100 Ethernet module",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions"
            }
          ]
        },
        {
          "product": "Firmware variant Profinet IO for EN100 Ethernet module",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions"
            }
          ]
        },
        {
          "product": "SIPROTEC 5 relays with CPU variants CP300 and CP100 and the respective Ethernet communication modules",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V7.82"
            }
          ]
        },
        {
          "product": "SIPROTEC 5 relays with CPU variants CP200 and the respective Ethernet communication modules",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V7.58"
            }
          ]
        }
      ],
      "datePublic": "2019-02-12T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability has been identified in Firmware variant IEC 61850 for EN100 Ethernet module (All versions \u003c V4.35), Firmware variant MODBUS TCP for EN100 Ethernet module (All versions), Firmware variant DNP3 TCP for EN100 Ethernet module (All versions), Firmware variant IEC104 for EN100 Ethernet module (All versions), Firmware variant Profinet IO for EN100 Ethernet module (All versions), SIPROTEC 5 relays with CPU variants CP300 and CP100 and the respective Ethernet communication modules (All versions \u003c V7.82), SIPROTEC 5 relays with CPU variants CP200 and the respective Ethernet communication modules (All versions \u003c V7.58). Specially crafted packets to port 102/tcp could cause a denial-of-service condition in the affected products. A manual restart is required to recover the EN100 module functionality of the affected devices. Successful exploitation requires an attacker with network access to send multiple packets to the affected products or modules. As a precondition the IEC 61850-MMS communication needs to be activated on the affected products or modules. No user interaction or privileges are required to exploit the vulnerability. The vulnerability could allow causing a Denial-of-Service condition of the network functionality of the device, compromising the availability of the system. At the time of advisory publication no public exploitation of this security vulnerability was known."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Other",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-03-21T14:57:36",
        "orgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
        "shortName": "siemens"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-104088.pdf"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "productcert@siemens.com",
          "ID": "CVE-2018-16563",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Firmware variant IEC 61850 for EN100 Ethernet module",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V4.35"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Siemens"
              },
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Firmware variant MODBUS TCP for EN100 Ethernet module",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Siemens"
              },
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Firmware variant DNP3 TCP for EN100 Ethernet module",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Siemens"
              },
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Firmware variant IEC104 for EN100 Ethernet module",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Siemens"
              },
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Firmware variant Profinet IO for EN100 Ethernet module",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Siemens"
              },
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "SIPROTEC 5 relays with CPU variants CP300 and CP100 and the respective Ethernet communication modules",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V7.82"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Siemens"
              },
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "SIPROTEC 5 relays with CPU variants CP200 and the respective Ethernet communication modules",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V7.58"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Siemens"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A vulnerability has been identified in Firmware variant IEC 61850 for EN100 Ethernet module (All versions \u003c V4.35), Firmware variant MODBUS TCP for EN100 Ethernet module (All versions), Firmware variant DNP3 TCP for EN100 Ethernet module (All versions), Firmware variant IEC104 for EN100 Ethernet module (All versions), Firmware variant Profinet IO for EN100 Ethernet module (All versions), SIPROTEC 5 relays with CPU variants CP300 and CP100 and the respective Ethernet communication modules (All versions \u003c V7.82), SIPROTEC 5 relays with CPU variants CP200 and the respective Ethernet communication modules (All versions \u003c V7.58). Specially crafted packets to port 102/tcp could cause a denial-of-service condition in the affected products. A manual restart is required to recover the EN100 module functionality of the affected devices. Successful exploitation requires an attacker with network access to send multiple packets to the affected products or modules. As a precondition the IEC 61850-MMS communication needs to be activated on the affected products or modules. No user interaction or privileges are required to exploit the vulnerability. The vulnerability could allow causing a Denial-of-Service condition of the network functionality of the device, compromising the availability of the system. At the time of advisory publication no public exploitation of this security vulnerability was known."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Other"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-104088.pdf",
              "refsource": "CONFIRM",
              "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-104088.pdf"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
    "assignerShortName": "siemens",
    "cveId": "CVE-2018-16563",
    "datePublished": "2019-03-21T14:57:36",
    "dateReserved": "2018-09-06T00:00:00",
    "dateUpdated": "2024-08-05T10:24:32.996Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2021-33719
Vulnerability from cvelistv5
Published
2021-09-14 10:47
Modified
2024-08-03 23:58
Severity ?
Summary
A vulnerability has been identified in SIPROTEC 5 relays with CPU variants CP050 (All versions < V8.80), SIPROTEC 5 relays with CPU variants CP100 (All versions < V8.80), SIPROTEC 5 relays with CPU variants CP300 (All versions < V8.80). Specially crafted packets sent to port 4443/tcp could cause a Denial-of-Service condition or potential remote code execution.
References
https://cert-portal.siemens.com/productcert/pdf/ssa-847986.pdfx_refsource_MISC
Impacted products
Vendor Product Version
Siemens SIPROTEC 5 relays with CPU variants CP100 Version: All versions < V8.80
Siemens SIPROTEC 5 relays with CPU variants CP300 Version: All versions < V8.80
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T23:58:22.916Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-847986.pdf"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "SIPROTEC 5 relays with CPU variants CP050",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V8.80"
            }
          ]
        },
        {
          "product": "SIPROTEC 5 relays with CPU variants CP100",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V8.80"
            }
          ]
        },
        {
          "product": "SIPROTEC 5 relays with CPU variants CP300",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V8.80"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability has been identified in SIPROTEC 5 relays with CPU variants CP050 (All versions \u003c V8.80), SIPROTEC 5 relays with CPU variants CP100 (All versions \u003c V8.80), SIPROTEC 5 relays with CPU variants CP300 (All versions \u003c V8.80). Specially crafted packets sent to port 4443/tcp could cause a Denial-of-Service condition or potential remote code execution."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-120",
              "description": "CWE-120: Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-10-12T09:49:21",
        "orgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
        "shortName": "siemens"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-847986.pdf"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "productcert@siemens.com",
          "ID": "CVE-2021-33719",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "SIPROTEC 5 relays with CPU variants CP050",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V8.80"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SIPROTEC 5 relays with CPU variants CP100",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V8.80"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SIPROTEC 5 relays with CPU variants CP300",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V8.80"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Siemens"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A vulnerability has been identified in SIPROTEC 5 relays with CPU variants CP050 (All versions \u003c V8.80), SIPROTEC 5 relays with CPU variants CP100 (All versions \u003c V8.80), SIPROTEC 5 relays with CPU variants CP300 (All versions \u003c V8.80). Specially crafted packets sent to port 4443/tcp could cause a Denial-of-Service condition or potential remote code execution."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-120: Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-847986.pdf",
              "refsource": "MISC",
              "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-847986.pdf"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
    "assignerShortName": "siemens",
    "cveId": "CVE-2021-33719",
    "datePublished": "2021-09-14T10:47:35",
    "dateReserved": "2021-05-28T00:00:00",
    "dateUpdated": "2024-08-03T23:58:22.916Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2021-33720
Vulnerability from cvelistv5
Published
2021-09-14 10:47
Modified
2024-08-03 23:58
Severity ?
Summary
A vulnerability has been identified in SIPROTEC 5 relays with CPU variants CP050 (All versions < V8.80), SIPROTEC 5 relays with CPU variants CP100 (All versions < V8.80), SIPROTEC 5 relays with CPU variants CP300 (All versions < V8.80). Specially crafted packets sent to port 4443/tcp could cause a Denial-of-Service condition.
References
https://cert-portal.siemens.com/productcert/pdf/ssa-847986.pdfx_refsource_MISC
Impacted products
Vendor Product Version
Siemens SIPROTEC 5 relays with CPU variants CP100 Version: All versions < V8.80
Siemens SIPROTEC 5 relays with CPU variants CP300 Version: All versions < V8.80
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T23:58:22.902Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-847986.pdf"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "SIPROTEC 5 relays with CPU variants CP050",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V8.80"
            }
          ]
        },
        {
          "product": "SIPROTEC 5 relays with CPU variants CP100",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V8.80"
            }
          ]
        },
        {
          "product": "SIPROTEC 5 relays with CPU variants CP300",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V8.80"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability has been identified in SIPROTEC 5 relays with CPU variants CP050 (All versions \u003c V8.80), SIPROTEC 5 relays with CPU variants CP100 (All versions \u003c V8.80), SIPROTEC 5 relays with CPU variants CP300 (All versions \u003c V8.80). Specially crafted packets sent to port 4443/tcp could cause a Denial-of-Service condition."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-120",
              "description": "CWE-120: Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-10-12T09:49:22",
        "orgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
        "shortName": "siemens"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-847986.pdf"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "productcert@siemens.com",
          "ID": "CVE-2021-33720",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "SIPROTEC 5 relays with CPU variants CP050",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V8.80"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SIPROTEC 5 relays with CPU variants CP100",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V8.80"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SIPROTEC 5 relays with CPU variants CP300",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V8.80"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Siemens"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A vulnerability has been identified in SIPROTEC 5 relays with CPU variants CP050 (All versions \u003c V8.80), SIPROTEC 5 relays with CPU variants CP100 (All versions \u003c V8.80), SIPROTEC 5 relays with CPU variants CP300 (All versions \u003c V8.80). Specially crafted packets sent to port 4443/tcp could cause a Denial-of-Service condition."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-120: Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-847986.pdf",
              "refsource": "MISC",
              "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-847986.pdf"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
    "assignerShortName": "siemens",
    "cveId": "CVE-2021-33720",
    "datePublished": "2021-09-14T10:47:36",
    "dateReserved": "2021-05-28T00:00:00",
    "dateUpdated": "2024-08-03T23:58:22.902Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2021-37206
Vulnerability from cvelistv5
Published
2021-09-14 10:47
Modified
2024-08-04 01:16
Severity ?
Summary
A vulnerability has been identified in SIPROTEC 5 relays with CPU variants CP050 (All versions < V8.80), SIPROTEC 5 relays with CPU variants CP100 (All versions < V8.80), SIPROTEC 5 relays with CPU variants CP300 (All versions < V8.80). Received webpackets are not properly processed. An unauthenticated remote attacker with access to any of the Ethernet interfaces could send specially crafted packets to force a restart of the target device.
References
https://cert-portal.siemens.com/productcert/pdf/ssa-500748.pdfx_refsource_MISC
Impacted products
Vendor Product Version
Siemens SIPROTEC 5 relays with CPU variants CP100 Version: All versions < V8.80
Siemens SIPROTEC 5 relays with CPU variants CP300 Version: All versions < V8.80
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T01:16:03.653Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-500748.pdf"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "SIPROTEC 5 relays with CPU variants CP050",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V8.80"
            }
          ]
        },
        {
          "product": "SIPROTEC 5 relays with CPU variants CP100",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V8.80"
            }
          ]
        },
        {
          "product": "SIPROTEC 5 relays with CPU variants CP300",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V8.80"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability has been identified in SIPROTEC 5 relays with CPU variants CP050 (All versions \u003c V8.80), SIPROTEC 5 relays with CPU variants CP100 (All versions \u003c V8.80), SIPROTEC 5 relays with CPU variants CP300 (All versions \u003c V8.80). Received webpackets are not properly processed. An unauthenticated remote attacker with access to any of the Ethernet interfaces could send specially crafted packets to force a restart of the target device."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-20",
              "description": "CWE-20: Improper Input Validation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-10-12T09:49:38",
        "orgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
        "shortName": "siemens"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-500748.pdf"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "productcert@siemens.com",
          "ID": "CVE-2021-37206",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "SIPROTEC 5 relays with CPU variants CP050",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V8.80"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SIPROTEC 5 relays with CPU variants CP100",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V8.80"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SIPROTEC 5 relays with CPU variants CP300",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V8.80"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Siemens"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A vulnerability has been identified in SIPROTEC 5 relays with CPU variants CP050 (All versions \u003c V8.80), SIPROTEC 5 relays with CPU variants CP100 (All versions \u003c V8.80), SIPROTEC 5 relays with CPU variants CP300 (All versions \u003c V8.80). Received webpackets are not properly processed. An unauthenticated remote attacker with access to any of the Ethernet interfaces could send specially crafted packets to force a restart of the target device."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-20: Improper Input Validation"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-500748.pdf",
              "refsource": "MISC",
              "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-500748.pdf"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
    "assignerShortName": "siemens",
    "cveId": "CVE-2021-37206",
    "datePublished": "2021-09-14T10:47:57",
    "dateReserved": "2021-07-21T00:00:00",
    "dateUpdated": "2024-08-04T01:16:03.653Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}