SIPROTEC 5 6MD89 (CP300) V9.6x vulnerabilities

2 known vulnerabilities in SIPROTEC 5 6MD89 (CP300) V9.6x from Siemens. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  SIPROTEC 5 6MD84 (CP300): Use of Default Credentials

  CVE-2024-54015Feb 11, 2025Siemens

  A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V9.90), SIPROTEC 5 6MD85 (CP300) (All versions >= V8.80 < V9.90), SIPROTEC 5 6MD86 (CP300) (All versions >= V8.80 < V9.90), SIPROTEC 5 6MD89 (CP300) (All versions >= V8.80 < V9.90)

• 9.0 Critical severity

  RFC: Improper Validation of Integrity Check Value

  CVE-2024-3596Jul 9, 2024IETFEPSS 14.9%

  RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response using a chosen-prefix collision attack against MD5 Response Authent