CVE-2025-40742: fallo de gravedad media en Siemens SIPROTEC 5 6MD84 (CP300)
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
13Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 6epss 0.3%
A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V11.0), SIPROTEC 5 6MD85 (CP200) (All versions), SIPROTEC 5 6MD85 (CP300) (All versions < V11.0), SIPROTEC 5 6MD86 (CP200) (All versions), SIPROTEC 5 6MD86 (CP300) (All versions < V11.0), SIPROTEC 5 6MD89 (CP300) (All versions < V11.0), SIPROTEC 5 6MD89 (CP300) V9.6x (All versions < V11.0), SIPROTEC 5 6MU85 (CP300) (All versions < V11.0), SIPROTEC 5 7KE85 (CP200) (All versions), SIPROTEC 5 7KE85 (CP300) (All versions < V11.0), SIPROTEC 5 7SA82 (CP100) (All versions), SIPROTEC 5 7SA82 (CP150) (All versions < V11.0), SIPROTEC 5 7SA84 (CP200) (All versions), SIPROTEC 5 7SA86 (CP200) (All versions), SIPROTEC 5 7SA86 (CP300) (All versions < V11.0), SIPROTEC 5 7SA87 (CP200) (All versions), SIPROTEC 5 7SA87 (CP300) (All versions < V11.0), SIPROTEC 5 7SD82 (CP100) (All versions), SIPROTEC 5 7SD82 (CP150) (All versions < V11.0), SIPROTEC 5 7SD84 (CP200) (All versions), SIPROTEC 5 7SD86 (CP200) (All versions), SIPROTEC 5 7SD86 (CP300) (All versions < V11.0), SIPROTEC 5 7SD87 (CP200) (All versions), SIPROTEC 5 7SD87 (CP300) (All versions < V11.0), SIPROTEC 5 7SJ81 (CP100) (All versions), SIPROTEC 5 7SJ81 (CP150) (All versions < V11.0), SIPROTEC 5 7SJ82 (CP100) (All versions), SIPROTEC 5 7SJ82 (CP150) (All versions < V11.0), SIPROTEC 5 7SJ85 (CP200) (All versions), SIPROTEC 5 7SJ85 (CP300) (All versions < V11.0), SIPROTEC 5 7SJ86 (CP200) (All versions), SIPROTEC 5 7SJ86 (CP300) (All versions < V11.0), SIPROTEC 5 7SK82 (CP100) (All versions), SIPROTEC 5 7SK82 (CP150) (All versions < V11.0), SIPROTEC 5 7SK85 (CP200) (All versions), SIPROTEC 5 7SK85 (CP300) (All versions < V11.0), SIPROTEC 5 7SL82 (CP100) (All versions), SIPROTEC 5 7SL82 (CP150) (All versions < V11.0), SIPROTEC 5 7SL86 (CP200) (All versions), SIPROTEC 5 7SL86 (CP300) (All versions < V11.0), SIPROTEC 5 7SL87 (CP200) (All versions), SIPROTEC 5 7SL87 (CP300) (All versions < V11.0), SIPROTEC 5 7SS85 (CP200) (All versions), SIPROTEC 5 7SS85 (CP300) (All versions < V11.0), SIPROTEC 5 7ST85 (CP200) (All versions), SIPROTEC 5 7ST85 (CP300) (All versions < V11.0), SIPROTEC 5 7ST86 (CP300) (All versions < V11.0), SIPROTEC 5 7SX82 (CP150) (All versions < V11.0), SIPROTEC 5 7SX85 (CP300) (All versions < V11.0), SIPROTEC 5 7SY82 (CP150) (All versions < V11.0), SIPROTEC 5 7UM85 (CP300) (All versions < V11.0), SIPROTEC 5 7UT82 (CP100) (All versions), SIPROTEC 5 7UT82 (CP150) (All versions < V11.0), SIPROTEC 5 7UT85 (CP200) (All versions), SIPROTEC 5 7UT85 (CP300) (All versions < V11.0), SIPROTEC 5 7UT86 (CP200) (All versions), SIPROTEC 5 7UT86 (CP300) (All versions < V11.0), SIPROTEC 5 7UT87 (CP200) (All versions), SIPROTEC 5 7UT87 (CP300) (All versions < V11.0), SIPROTEC 5 7VE85 (CP300) (All versions < V11.0), SIPROTEC 5 7VK87 (CP200) (All versions), SIPROTEC 5 7VK87 (CP300) (All versions < V11.0), SIPROTEC 5 7VU85 (CP300) (All versions < V11.0), SIPROTEC 5 Compact 7SX800 (CP050) (All versions < V11.0). The affected devices include session identifiers in URL requests for certain functionalities. This could allow an attacker to retrieve sensitive session data from browser history, logs, or other storage mechanisms, potentially leading to unauthorized access.
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Productos afectados
Siemens · SIPROTEC 5 6MD84 (CP300)Siemens · SIPROTEC 5 6MD85 (CP200)Siemens · SIPROTEC 5 6MD85 (CP300)Siemens · SIPROTEC 5 6MD86 (CP200)Siemens · SIPROTEC 5 6MD86 (CP300)Siemens · SIPROTEC 5 6MD89 (CP300)Siemens · SIPROTEC 5 6MD89 (CP300) V9.6xSiemens · SIPROTEC 5 6MU85 (CP300)Siemens · SIPROTEC 5 7KE85 (CP200)Siemens · SIPROTEC 5 7KE85 (CP300)Siemens · SIPROTEC 5 7SA82 (CP100)Siemens · SIPROTEC 5 7SA82 (CP150)Siemens · SIPROTEC 5 7SA84 (CP200)Siemens · SIPROTEC 5 7SA86 (CP200)Siemens · SIPROTEC 5 7SA86 (CP300)Siemens · SIPROTEC 5 7SA87 (CP200)Siemens · SIPROTEC 5 7SA87 (CP300)Siemens · SIPROTEC 5 7SD82 (CP100)Siemens · SIPROTEC 5 7SD82 (CP150)Siemens · SIPROTEC 5 7SD84 (CP200)Siemens · SIPROTEC 5 7SD86 (CP200)Siemens · SIPROTEC 5 7SD86 (CP300)Siemens · SIPROTEC 5 7SD87 (CP200)Siemens · SIPROTEC 5 7SD87 (CP300)Siemens · SIPROTEC 5 7SJ81 (CP100)Siemens · SIPROTEC 5 7SJ81 (CP150)Siemens · SIPROTEC 5 7SJ82 (CP100)Siemens · SIPROTEC 5 7SJ82 (CP150)Siemens · SIPROTEC 5 7SJ85 (CP200)Siemens · SIPROTEC 5 7SJ85 (CP300)Siemens · SIPROTEC 5 7SJ86 (CP200)Siemens · SIPROTEC 5 7SJ86 (CP300)Siemens · SIPROTEC 5 7SK82 (CP100)Siemens · SIPROTEC 5 7SK82 (CP150)Siemens · SIPROTEC 5 7SK85 (CP200)Siemens · SIPROTEC 5 7SK85 (CP300)Siemens · SIPROTEC 5 7SL82 (CP100)Siemens · SIPROTEC 5 7SL82 (CP150)Siemens · SIPROTEC 5 7SL86 (CP200)Siemens · SIPROTEC 5 7SL86 (CP300)Siemens · SIPROTEC 5 7SL87 (CP200)Siemens · SIPROTEC 5 7SL87 (CP300)Siemens · SIPROTEC 5 7SS85 (CP200)Siemens · SIPROTEC 5 7SS85 (CP300)Siemens · SIPROTEC 5 7ST85 (CP200)Siemens · SIPROTEC 5 7ST85 (CP300)Siemens · SIPROTEC 5 7ST86 (CP300)Siemens · SIPROTEC 5 7SX82 (CP150)Siemens · SIPROTEC 5 7SX85 (CP300)Siemens · SIPROTEC 5 7SY82 (CP150)Siemens · SIPROTEC 5 7UM85 (CP300)Siemens · SIPROTEC 5 7UT82 (CP100)Siemens · SIPROTEC 5 7UT82 (CP150)Siemens · SIPROTEC 5 7UT85 (CP200)Siemens · SIPROTEC 5 7UT85 (CP300)Siemens · SIPROTEC 5 7UT86 (CP200)Siemens · SIPROTEC 5 7UT86 (CP300)Siemens · SIPROTEC 5 7UT87 (CP200)Siemens · SIPROTEC 5 7UT87 (CP300)Siemens · SIPROTEC 5 7VE85 (CP300)Siemens · SIPROTEC 5 7VK87 (CP200)Siemens · SIPROTEC 5 7VK87 (CP300)Siemens · SIPROTEC 5 7VU85 (CP300)Siemens · SIPROTEC 5 Compact 7SX800 (CP050)CVEs relacionadas — Siemens SIPROTEC 5 6MD84 (CP300)
En el mismo producto, de las más peligrosas a las menos.