CVE-2024-53649

Severity: medium (CVSS 6.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-01-14 · updated 2026-06-17
Weakness: CWE-552

Description

A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V9.80), SIPROTEC 5 6MD85 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 6MD86 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 6MD89 (CP300) (All versions >= V7.80 < V9.68), SIPROTEC 5 6MU85 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 7KE85 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 7SA82 (CP100) (All versions >= V7.80 < V8.90), SIPROTEC 5 7SA82 (CP150) (All versions < V9.80), SIPROTEC 5 7SA86 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 7SA87 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 7SD82 (CP100) (All versions >= V7.80 < V8.90), SIPROTEC 5 7SD82 (CP150) (All versions < V9.80), SIPROTEC 5 7SD86 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 7SD87 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 7SJ81 (CP100) (All versions >= V7.80 < V8.90), SIPROTEC 5 7SJ81 (CP150) (All versions < V9.80), SIPROTEC 5 7SJ82 (CP100) (All versions >= V7.80 < V8.90), SIPROTEC 5 7SJ82 (CP150) (All versions < V9.80), SIPROTEC 5 7SJ85 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 7SJ86 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 7SK82 (CP100) (All versions >= V7.80 < V8.90), SIPROTEC 5 7SK82 (CP150) (All versions < V9.80), SIPROTEC 5 7SK85 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 7SL82 (CP100) (All versions >= V7.80 < V8.90), SIPROTEC 5 7SL82 (CP150) (All versions < V9.80), SIPROTEC 5 7SL86 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 7SL87 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 7SS85 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 7ST85 (CP300) (All versions < V9.68), SIPROTEC 5 7ST86 (CP300) (All versions < V9.80), SIPROTEC 5 7SX82 (CP150) (All versions < V9.80), SIPROTEC 5 7SX85 (CP300) (All versions < V9.80), SIPROTEC 5 7SY82 (CP150) (All versions < V9.80), SIPROTEC 5 7UM85 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 7UT82 (CP100) (All versions >= V7.80 < V8.90), SIPROTEC 5 7UT82 (CP150) (All versions < V9.80), SIPROTEC 5 7UT85 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 7UT86 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 7UT87 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 7VE85 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 7VK87 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 7VU85 (CP300) (All versions < V9.80), SIPROTEC 5 Compact 7SX800 (CP050) (All versions < V9.80). Affected devices do not properly limit the path accessible via their webserver. This could allow an authenticated remote attacker to read arbitrary files from the filesystem of affected devices.

Affected products

Siemens SIPROTEC 5 6MD84 (CP300): before V9.80 — fixed in V9.80
Siemens SIPROTEC 5 6MD85 (CP300): from V7.80 before V9.80 — fixed in V9.80
Siemens SIPROTEC 5 6MD86 (CP300): from V7.80 before V9.80 — fixed in V9.80
Siemens SIPROTEC 5 6MD89 (CP300): from V7.80 before V9.68 — fixed in V9.68
Siemens SIPROTEC 5 6MU85 (CP300): from V7.80 before V9.80 — fixed in V9.80
Siemens SIPROTEC 5 7KE85 (CP300): from V7.80 before V9.80 — fixed in V9.80
Siemens SIPROTEC 5 7SA82 (CP100): from V7.80 before V8.90 — fixed in V8.90
Siemens SIPROTEC 5 7SA82 (CP150): before V9.80 — fixed in V9.80
Siemens SIPROTEC 5 7SA86 (CP300): from V7.80 before V9.80 — fixed in V9.80
Siemens SIPROTEC 5 7SA87 (CP300): from V7.80 before V9.80 — fixed in V9.80
Siemens SIPROTEC 5 7SD82 (CP100): from V7.80 before V8.90 — fixed in V8.90
Siemens SIPROTEC 5 7SD82 (CP150): before V9.80 — fixed in V9.80
Siemens SIPROTEC 5 7SD86 (CP300): from V7.80 before V9.80 — fixed in V9.80
Siemens SIPROTEC 5 7SD87 (CP300): from V7.80 before V9.80 — fixed in V9.80
Siemens SIPROTEC 5 7SJ81 (CP100): from V7.80 before V8.90 — fixed in V8.90
Siemens SIPROTEC 5 7SJ81 (CP150): before V9.80 — fixed in V9.80
Siemens SIPROTEC 5 7SJ82 (CP100): from V7.80 before V8.90 — fixed in V8.90
Siemens SIPROTEC 5 7SJ82 (CP150): before V9.80 — fixed in V9.80
Siemens SIPROTEC 5 7SJ85 (CP300): from V7.80 before V9.80 — fixed in V9.80
Siemens SIPROTEC 5 7SJ86 (CP300): from V7.80 before V9.80 — fixed in V9.80
Siemens SIPROTEC 5 7SK82 (CP100): from V7.80 before V8.90 — fixed in V8.90
Siemens SIPROTEC 5 7SK82 (CP150): before V9.80 — fixed in V9.80
Siemens SIPROTEC 5 7SK85 (CP300): from V7.80 before V9.80 — fixed in V9.80
Siemens SIPROTEC 5 7SL82 (CP100): from V7.80 before V8.90 — fixed in V8.90
Siemens SIPROTEC 5 7SL82 (CP150): before V9.80 — fixed in V9.80
Siemens SIPROTEC 5 7SL86 (CP300): from V7.80 before V9.80 — fixed in V9.80
Siemens SIPROTEC 5 7SL87 (CP300): from V7.80 before V9.80 — fixed in V9.80
Siemens SIPROTEC 5 7SS85 (CP300): from V7.80 before V9.80 — fixed in V9.80
Siemens SIPROTEC 5 7ST85 (CP300): before V9.68 — fixed in V9.68
Siemens SIPROTEC 5 7ST86 (CP300): before V9.80 — fixed in V9.80

How to fix

Upgrade to a fixed version: Siemens SIPROTEC 5 6MD84 (CP300) V9.80; Siemens SIPROTEC 5 6MD85 (CP300) V9.80; Siemens SIPROTEC 5 6MD86 (CP300) V9.80; Siemens SIPROTEC 5 6MD89 (CP300) V9.68; Siemens SIPROTEC 5 6MU85 (CP300) V9.80; Siemens SIPROTEC 5 7KE85 (CP300) V9.80; Siemens SIPROTEC 5 7SA82 (CP100) V8.90; Siemens SIPROTEC 5 7SA82 (CP150) V9.80; Siemens SIPROTEC 5 7SA86 (CP300) V9.80; Siemens SIPROTEC 5 7SA87 (CP300) V9.80; Siemens SIPROTEC 5 7SD82 (CP100) V8.90; Siemens SIPROTEC 5 7SD82 (CP150) V9.80. Check the vendor advisory for mitigations.

References

https://cert-portal.siemens.com/productcert/html/ssa-194557.html

Get alerted when CVE-2024-53649 or the next vulnerability affects your stack