CVE-2024-54015

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-02-11 · updated 2026-06-17
Weakness: CWE-1392

Description

A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V9.90), SIPROTEC 5 6MD85 (CP300) (All versions >= V8.80 < V9.90), SIPROTEC 5 6MD86 (CP300) (All versions >= V8.80 < V9.90), SIPROTEC 5 6MD89 (CP300) (All versions >= V8.80 < V9.90), SIPROTEC 5 6MD89 (CP300) V9.6x (All versions < V9.68), SIPROTEC 5 6MU85 (CP300) (All versions >= V8.80 < V9.90), SIPROTEC 5 7KE85 (CP300) (All versions >= V8.80 < V10.0), SIPROTEC 5 7SA82 (CP150) (All versions < V9.90), SIPROTEC 5 7SA86 (CP300) (All versions >= V8.80 < V9.90), SIPROTEC 5 7SA87 (CP300) (All versions >= V8.80 < V9.90), SIPROTEC 5 7SD82 (CP150) (All versions < V9.90), SIPROTEC 5 7SD86 (CP300) (All versions >= V8.80 < V9.90), SIPROTEC 5 7SD87 (CP300) (All versions >= V8.80 < V9.90), SIPROTEC 5 7SJ81 (CP150) (All versions < V9.90), SIPROTEC 5 7SJ82 (CP150) (All versions < V9.90), SIPROTEC 5 7SJ85 (CP300) (All versions >= V8.80 < V9.90), SIPROTEC 5 7SJ86 (CP300) (All versions >= V8.80 < V9.90), SIPROTEC 5 7SK82 (CP150) (All versions < V9.90), SIPROTEC 5 7SK85 (CP300) (All versions >= V8.80 < V9.90), SIPROTEC 5 7SL82 (CP150) (All versions < V9.90), SIPROTEC 5 7SL86 (CP300) (All versions >= V8.80 < V9.90), SIPROTEC 5 7SL87 (CP300) (All versions >= V8.80 < V9.90), SIPROTEC 5 7SS85 (CP300) (All versions >= V8.80 < V9.90), SIPROTEC 5 7ST85 (CP300) (All versions >= V8.80 < V10.0), SIPROTEC 5 7ST85 (CP300) V9.6x (All versions < V9.68), SIPROTEC 5 7ST86 (CP300) (All versions < V10.0), SIPROTEC 5 7ST86 (CP300) V9.8x (All versions < V9.83), SIPROTEC 5 7SX82 (CP150) (All versions < V9.90), SIPROTEC 5 7SX85 (CP300) (All versions >= V8.80 < V9.90), SIPROTEC 5 7SY82 (CP150) (All versions < V9.90), SIPROTEC 5 7UM85 (CP300) (All versions >= V8.80 < V9.90), SIPROTEC 5 7UT82 (CP150) (All versions < V9.90), SIPROTEC 5 7UT85 (CP300) (All versions >= V8.80 < V9.90), SIPROTEC 5 7UT86 (CP300) (All versions >= V8.80 < V9.90), SIPROTEC 5 7UT87 (CP300) (All versions >= V8.80 < V9.90), SIPROTEC 5 7VE85 (CP300) (All versions >= V8.80 < V9.90), SIPROTEC 5 7VK87 (CP300) (All versions >= V8.80 < V9.90), SIPROTEC 5 7VU85 (CP300) (All versions < V9.90), SIPROTEC 5 Communication Module ETH-BA-2EL (Rev.2) (All versions < V9.90), SIPROTEC 5 Communication Module ETH-BA-2EL (Rev.2) V9.6 (All versions < V9.68), SIPROTEC 5 Communication Module ETH-BA-2EL (Rev.2) V9.8 (All versions < V9.83), SIPROTEC 5 Communication Module ETH-BB-2FO (Rev. 2) (All versions < V9.90), SIPROTEC 5 Communication Module ETH-BB-2FO (Rev. 2) V9.6 (All versions < V9.68), SIPROTEC 5 Communication Module ETH-BB-2FO (Rev. 2) V9.8 (All versions < V9.83), SIPROTEC 5 Communication Module ETH-BD-2FO (All versions >= V8.80 < V9.90), SIPROTEC 5 Communication Module ETH-BD-2FO V9.6 (All versions < V9.68), SIPROTEC 5 Communication Module ETH-BD-2FO V9.8 (All versions < V9.83), SIPROTEC 5 Compact 7SX800 (CP050) (All versions >= V9.50 < V9.90). Affected devices do not properly validate SNMP GET requests. This could allow an unauthenticated, remote attacker to retrieve sensitive information of the affected devices with SNMPv2 GET requests using default credentials.

Affected products

Siemens SIPROTEC 5 6MD84 (CP300): before V9.90 — fixed in V9.90
Siemens SIPROTEC 5 6MD85 (CP300): from V8.80 before V9.90 — fixed in V9.90
Siemens SIPROTEC 5 6MD86 (CP300): from V8.80 before V9.90 — fixed in V9.90
Siemens SIPROTEC 5 6MD89 (CP300): from V8.80 before V9.90 — fixed in V9.90
Siemens SIPROTEC 5 6MD89 (CP300) V9.6x: before V9.68 — fixed in V9.68
Siemens SIPROTEC 5 6MU85 (CP300): from V8.80 before V9.90 — fixed in V9.90
Siemens SIPROTEC 5 7KE85 (CP300): from V8.80 before V10.0 — fixed in V10.0
Siemens SIPROTEC 5 7SA82 (CP150): before V9.90 — fixed in V9.90
Siemens SIPROTEC 5 7SA86 (CP300): from V8.80 before V9.90 — fixed in V9.90
Siemens SIPROTEC 5 7SA87 (CP300): from V8.80 before V9.90 — fixed in V9.90
Siemens SIPROTEC 5 7SD82 (CP150): before V9.90 — fixed in V9.90
Siemens SIPROTEC 5 7SD86 (CP300): from V8.80 before V9.90 — fixed in V9.90
Siemens SIPROTEC 5 7SD87 (CP300): from V8.80 before V9.90 — fixed in V9.90
Siemens SIPROTEC 5 7SJ81 (CP150): before V9.90 — fixed in V9.90
Siemens SIPROTEC 5 7SJ82 (CP150): before V9.90 — fixed in V9.90
Siemens SIPROTEC 5 7SJ85 (CP300): from V8.80 before V9.90 — fixed in V9.90
Siemens SIPROTEC 5 7SJ86 (CP300): from V8.80 before V9.90 — fixed in V9.90
Siemens SIPROTEC 5 7SK82 (CP150): before V9.90 — fixed in V9.90
Siemens SIPROTEC 5 7SK85 (CP300): from V8.80 before V9.90 — fixed in V9.90
Siemens SIPROTEC 5 7SL82 (CP150): before V9.90 — fixed in V9.90
Siemens SIPROTEC 5 7SL86 (CP300): from V8.80 before V9.90 — fixed in V9.90
Siemens SIPROTEC 5 7SL87 (CP300): from V8.80 before V9.90 — fixed in V9.90
Siemens SIPROTEC 5 7SS85 (CP300): from V8.80 before V9.90 — fixed in V9.90
Siemens SIPROTEC 5 7ST85 (CP300): from V8.80 before V10.0 — fixed in V10.0
Siemens SIPROTEC 5 7ST85 (CP300) V9.6x: before V9.68 — fixed in V9.68
Siemens SIPROTEC 5 7ST86 (CP300): before V10.0 — fixed in V10.0
Siemens SIPROTEC 5 7ST86 (CP300) V9.8x: before V9.83 — fixed in V9.83
Siemens SIPROTEC 5 7SX82 (CP150): before V9.90 — fixed in V9.90
Siemens SIPROTEC 5 7SX85 (CP300): from V8.80 before V9.90 — fixed in V9.90
Siemens SIPROTEC 5 7SY82 (CP150): before V9.90 — fixed in V9.90

How to fix

Upgrade to a fixed version: Siemens SIPROTEC 5 6MD84 (CP300) V9.90; Siemens SIPROTEC 5 6MD85 (CP300) V9.90; Siemens SIPROTEC 5 6MD86 (CP300) V9.90; Siemens SIPROTEC 5 6MD89 (CP300) V9.90; Siemens SIPROTEC 5 6MD89 (CP300) V9.6x V9.68; Siemens SIPROTEC 5 6MU85 (CP300) V9.90; Siemens SIPROTEC 5 7KE85 (CP300) V10.0; Siemens SIPROTEC 5 7SA82 (CP150) V9.90; Siemens SIPROTEC 5 7SA86 (CP300) V9.90; Siemens SIPROTEC 5 7SA87 (CP300) V9.90; Siemens SIPROTEC 5 7SD82 (CP150) V9.90; Siemens SIPROTEC 5 7SD86 (CP300) V9.90. Check the vendor advisory for mitigations.

References

https://cert-portal.siemens.com/productcert/html/ssa-767615.html

Get alerted when CVE-2024-54015 or the next vulnerability affects your stack