SIPROTEC 5 7SJ82 (CP150) vulnerabilities

4 known vulnerabilities in SIPROTEC 5 7SJ82 (CP150) from Siemens. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  SIPROTEC 5 6MD84 (CP300): Use of Default Credentials

  CVE-2024-54015Feb 11, 2025Siemens

  A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V9.90), SIPROTEC 5 6MD85 (CP300) (All versions >= V8.80 < V9.90), SIPROTEC 5 6MD86 (CP300) (All versions >= V8.80 < V9.90), SIPROTEC 5 6MD89 (CP300) (All versions >= V8.80 < V9.90)

• 9.0 Critical severity

  RFC: Improper Validation of Integrity Check Value

  CVE-2024-3596Jul 9, 2024IETFEPSS 14.9%

  RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response using a chosen-prefix collision attack against MD5 Response Authent

• 7.5 High severity

  SIPROTEC 5 6MD85 (CP300): NULL Pointer Dereference

  CVE-2023-28766Apr 11, 2023Siemens

  A vulnerability has been identified in SIPROTEC 5 6MD85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 6MD86 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 6MD89 (CP300) (All versions >= V7.80 < V9.64), SIPROTEC 5 6MU85 (CP300) (All versions >= V7.80

• 7.5 High severity

  SIPROTEC 5 6MD84 (CP300): Uncontrolled Resource Consumption

  CVE-2022-45044Dec 13, 2022Siemens

  A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V9.50), SIPROTEC 5 6MD85 (CP200) (All versions), SIPROTEC 5 6MD85 (CP300) (All versions < V9.50), SIPROTEC 5 6MD86 (CP200) (All versions), SIPROTEC 5 6MD86 (CP300) (All versions <