CVE-2024-54015
21Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 8.7epss 0.6%
probabilidad de explotación
0.6%top 54% de las CVE
explotación observada
noninguna fuente lo reporta
A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V9.90), SIPROTEC 5 6MD85 (CP300) (All versions >= V8.80 < V9.90), SIPROTEC 5 6MD86 (CP300) (All versions >= V8.80 < V9.90), SIPROTEC 5 6MD89 (CP300) (All versions >= V8.80 < V9.90), SIPROTEC 5 6MD89 (CP300) V9.6x (All versions < V9.68), SIPROTEC 5 6MU85 (CP300) (All versions >= V8.80 < V9.90), SIPROTEC 5 7KE85 (CP300) (All versions >= V8.80 < V10.0), SIPROTEC 5 7SA82 (CP150) (All versions < V9.90), SIPROTEC 5 7SA86 (CP300) (All versions >= V8.80 < V9.90), SIPROTEC 5 7SA87 (CP300) (All versions >= V8.80 < V9.90), SIPROTEC 5 7SD82 (CP150) (All versions < V9.90), SIPROTEC 5 7SD86 (CP300) (All versions >= V8.80 < V9.90), SIPROTEC 5 7SD87 (CP300) (All versions >= V8.80 < V9.90), SIPROTEC 5 7SJ81 (CP150) (All versions < V9.90), SIPROTEC 5 7SJ82 (CP150) (All versions < V9.90), SIPROTEC 5 7SJ85 (CP300) (All versions >= V8.80 < V9.90), SIPROTEC 5 7SJ86 (CP300) (All versions >= V8.80 < V9.90), SIPROTEC 5 7SK82 (CP150) (All versions < V9.90), SIPROTEC 5 7SK85 (CP300) (All versions >= V8.80 < V9.90), SIPROTEC 5 7SL82 (CP150) (All versions < V9.90), SIPROTEC 5 7SL86 (CP300) (All versions >= V8.80 < V9.90), SIPROTEC 5 7SL87 (CP300) (All versions >= V8.80 < V9.90), SIPROTEC 5 7SS85 (CP300) (All versions >= V8.80 < V9.90), SIPROTEC 5 7ST85 (CP300) (All versions >= V8.80 < V10.0), SIPROTEC 5 7ST85 (CP300) V9.6x (All versions < V9.68), SIPROTEC 5 7ST86 (CP300) (All versions < V10.0), SIPROTEC 5 7ST86 (CP300) V9.8x (All versions < V9.83), SIPROTEC 5 7SX82 (CP150) (All versions < V9.90), SIPROTEC 5 7SX85 (CP300) (All versions >= V8.80 < V9.90), SIPROTEC 5 7SY82 (CP150) (All versions < V9.90), SIPROTEC 5 7UM85 (CP300) (All versions >= V8.80 < V9.90), SIPROTEC 5 7UT82 (CP150) (All versions < V9.90), SIPROTEC 5 7UT85 (CP300) (All versions >= V8.80 < V9.90), SIPROTEC 5 7UT86 (CP300) (All versions >= V8.80 < V9.90), SIPROTEC 5 7UT87 (CP300) (All versions >= V8.80 < V9.90), SIPROTEC 5 7VE85 (CP300) (All versions >= V8.80 < V9.90), SIPROTEC 5 7VK87 (CP300) (All versions >= V8.80 < V9.90), SIPROTEC 5 7VU85 (CP300) (All versions < V9.90), SIPROTEC 5 Communication Module ETH-BA-2EL (Rev.2) (All versions < V9.90), SIPROTEC 5 Communication Module ETH-BA-2EL (Rev.2) V9.6 (All versions < V9.68), SIPROTEC 5 Communication Module ETH-BA-2EL (Rev.2) V9.8 (All versions < V9.83), SIPROTEC 5 Communication Module ETH-BB-2FO (Rev. 2) (All versions < V9.90), SIPROTEC 5 Communication Module ETH-BB-2FO (Rev. 2) V9.6 (All versions < V9.68), SIPROTEC 5 Communication Module ETH-BB-2FO (Rev. 2) V9.8 (All versions < V9.83), SIPROTEC 5 Communication Module ETH-BD-2FO (All versions >= V8.80 < V9.90), SIPROTEC 5 Communication Module ETH-BD-2FO V9.6 (All versions < V9.68), SIPROTEC 5 Communication Module ETH-BD-2FO V9.8 (All versions < V9.83), SIPROTEC 5 Compact 7SX800 (CP050) (All versions >= V9.50 < V9.90). Affected devices do not properly validate SNMP GET requests. This could allow an unauthenticated, remote attacker to retrieve sensitive information of the affected devices with SNMPv2 GET requests using default credentials.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Productos afectados
Siemens · SIPROTEC 5 6MD84 (CP300)Siemens · SIPROTEC 5 6MD85 (CP300)Siemens · SIPROTEC 5 6MD86 (CP300)Siemens · SIPROTEC 5 6MD89 (CP300)Siemens · SIPROTEC 5 6MD89 (CP300) V9.6xSiemens · SIPROTEC 5 6MU85 (CP300)Siemens · SIPROTEC 5 7KE85 (CP300)Siemens · SIPROTEC 5 7SA82 (CP150)Siemens · SIPROTEC 5 7SA86 (CP300)Siemens · SIPROTEC 5 7SA87 (CP300)Siemens · SIPROTEC 5 7SD82 (CP150)Siemens · SIPROTEC 5 7SD86 (CP300)Siemens · SIPROTEC 5 7SD87 (CP300)Siemens · SIPROTEC 5 7SJ81 (CP150)Siemens · SIPROTEC 5 7SJ82 (CP150)Siemens · SIPROTEC 5 7SJ85 (CP300)Siemens · SIPROTEC 5 7SJ86 (CP300)Siemens · SIPROTEC 5 7SK82 (CP150)Siemens · SIPROTEC 5 7SK85 (CP300)Siemens · SIPROTEC 5 7SL82 (CP150)Siemens · SIPROTEC 5 7SL86 (CP300)Siemens · SIPROTEC 5 7SL87 (CP300)Siemens · SIPROTEC 5 7SS85 (CP300)Siemens · SIPROTEC 5 7ST85 (CP300)Siemens · SIPROTEC 5 7ST85 (CP300) V9.6xSiemens · SIPROTEC 5 7ST86 (CP300)Siemens · SIPROTEC 5 7ST86 (CP300) V9.8xSiemens · SIPROTEC 5 7SX82 (CP150)Siemens · SIPROTEC 5 7SX85 (CP300)Siemens · SIPROTEC 5 7SY82 (CP150)Siemens · SIPROTEC 5 7UM85 (CP300)Siemens · SIPROTEC 5 7UT82 (CP150)Siemens · SIPROTEC 5 7UT85 (CP300)Siemens · SIPROTEC 5 7UT86 (CP300)Siemens · SIPROTEC 5 7UT87 (CP300)Siemens · SIPROTEC 5 7VE85 (CP300)Siemens · SIPROTEC 5 7VK87 (CP300)Siemens · SIPROTEC 5 7VU85 (CP300)Siemens · SIPROTEC 5 Communication Module ETH-BA-2EL (Rev.2)Siemens · SIPROTEC 5 Communication Module ETH-BA-2EL (Rev.2) V9.6Siemens · SIPROTEC 5 Communication Module ETH-BA-2EL (Rev.2) V9.8Siemens · SIPROTEC 5 Communication Module ETH-BB-2FO (Rev. 2)Siemens · SIPROTEC 5 Communication Module ETH-BB-2FO (Rev. 2) V9.6Siemens · SIPROTEC 5 Communication Module ETH-BB-2FO (Rev. 2) V9.8Siemens · SIPROTEC 5 Communication Module ETH-BD-2FOSiemens · SIPROTEC 5 Communication Module ETH-BD-2FO V9.6Siemens · SIPROTEC 5 Communication Module ETH-BD-2FO V9.8Siemens · SIPROTEC 5 Compact 7SX800 (CP050)