Lucene search

K
cve[email protected]CVE-2023-28766
HistoryApr 11, 2023 - 10:15 a.m.

CVE-2023-28766

2023-04-1110:15:18
CWE-476
web.nvd.nist.gov
70
cve-2023-28766
vulnerability
siprotec 5
denial of service
remote attack

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.6%

A vulnerability has been identified in SIPROTEC 5 6MD85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 6MD86 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 6MD89 (CP300) (All versions >= V7.80 < V9.64), SIPROTEC 5 6MU85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7KE85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7SA82 (CP100) (All versions), SIPROTEC 5 7SA82 (CP150) (All versions < V9.40), SIPROTEC 5 7SA86 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7SA87 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7SD82 (CP100) (All versions), SIPROTEC 5 7SD82 (CP150) (All versions < V9.40), SIPROTEC 5 7SD86 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7SD87 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7SJ81 (CP100) (All versions < V8.89), SIPROTEC 5 7SJ81 (CP150) (All versions < V9.40), SIPROTEC 5 7SJ82 (CP100) (All versions < V8.89), SIPROTEC 5 7SJ82 (CP150) (All versions < V9.40), SIPROTEC 5 7SJ85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7SJ86 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7SK82 (CP100) (All versions < V8.89), SIPROTEC 5 7SK82 (CP150) (All versions < V9.40), SIPROTEC 5 7SK85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7SL82 (CP100) (All versions), SIPROTEC 5 7SL82 (CP150) (All versions < V9.40), SIPROTEC 5 7SL86 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7SL87 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7SS85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7ST85 (CP300) (All versions >= V7.80 < V9.64), SIPROTEC 5 7ST86 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7SX82 (CP150) (All versions < V9.40), SIPROTEC 5 7SX85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7UM85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7UT82 (CP100) (All versions), SIPROTEC 5 7UT82 (CP150) (All versions < V9.40), SIPROTEC 5 7UT85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7UT86 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7UT87 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7VE85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7VK87 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7VU85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 Communication Module ETH-BA-2EL (All versions < V9.40 installed on CP150 and CP300 devices), SIPROTEC 5 Communication Module ETH-BA-2EL (All versions < V8.89 installed on CP100 devices), SIPROTEC 5 Communication Module ETH-BB-2FO (All versions < V9.40 installed on CP150 and CP300 devices), SIPROTEC 5 Communication Module ETH-BB-2FO (All versions < V8.89 installed on CP100 devices), SIPROTEC 5 Communication Module ETH-BD-2FO (All versions < V9.40), SIPROTEC 5 Compact 7SX800 (CP050) (All versions < V9.40). Affected devices lack proper validation of http request parameters of the hosted web service.
An unauthenticated remote attacker could send specially crafted packets that could cause denial of service condition of the target device.

Affected configurations

NVD
Node
siemenssiprotec_5_6md85Matchcp200
AND
siemenssiprotec_5_6md85_firmware
Node
siemenssiprotec_5_6md85Matchcp300
AND
siemenssiprotec_5_6md85_firmwareRange<9.40
Node
siemenssiprotec_5_6md86Matchcp200
AND
siemenssiprotec_5_6md86_firmware
Node
siemenssiprotec_5_6md86Matchcp300
AND
siemenssiprotec_5_6md86_firmwareRange<9.40
Node
siemenssiprotec_5_6md89Matchcp300
AND
siemenssiprotec_5_6md89_firmware
Node
siemenssiprotec_5_6mu85Matchcp300
AND
siemenssiprotec_5_6mu85_firmwareRange<9.40
Node
siemenssiprotec_5_7ke85Matchcp200
AND
siemenssiprotec_5_7ke85_firmware
Node
siemenssiprotec_5_7ke85Matchcp300
AND
siemenssiprotec_5_7ke85_firmwareRange<9.40
Node
siemenssiprotec_5_7sa82Matchcp100
AND
siemenssiprotec_5_7sa82_firmware
Node
siemenssiprotec_5_7sa82Matchcp150
AND
siemenssiprotec_5_7sa82_firmwareRange<9.40
Node
siemenssiprotec_5_7sa86Matchcp200
AND
siemenssiprotec_5_7sa86_firmware
Node
siemenssiprotec_5_7sa86Matchcp300
AND
siemenssiprotec_5_7sa86_firmwareRange<9.40
Node
siemenssiprotec_5_7sa87Matchcp200
AND
siemenssiprotec_5_7sa87_firmware
Node
siemenssiprotec_5_7sa87Matchcp300
AND
siemenssiprotec_5_7sa87_firmwareRange<9.40
Node
siemenssiprotec_5_7sd82Matchcp100
AND
siemenssiprotec_5_7sd82_firmware
Node
siemenssiprotec_5_7sd82Matchcp150
AND
siemenssiprotec_5_7sd82_firmwareRange<9.40
Node
siemenssiprotec_5_7sd86_firmware
AND
siemenssiprotec_5_7sd86Matchcp200
Node
siemenssiprotec_5_7sd86_firmwareRange<9.40
AND
siemenssiprotec_5_7sd86Matchcp300
Node
siemenssiprotec_5_7sd87_firmware
AND
siemenssiprotec_5_7sd87Matchcp200
Node
siemenssiprotec_5_7sd87_firmwareRange<9.40
AND
siemenssiprotec_5_7sd87Matchcp300
Node
siemenssiprotec_5_7sj81_firmware
AND
siemenssiprotec_5_7sj81Matchcp100
Node
siemenssiprotec_5_7sj81_firmwareRange<9.40
AND
siemenssiprotec_5_7sj81Matchcp150
Node
siemenssiprotec_5_7sj82_firmware
AND
siemenssiprotec_5_7sj82Matchcp100
Node
siemenssiprotec_5_7sj82_firmwareRange<9.40
AND
siemenssiprotec_5_7sj82Matchcp150
Node
siemenssiprotec_5_7sj85_firmware
AND
siemenssiprotec_5_7sj85Matchcp200
Node
siemenssiprotec_5_7sj85_firmwareRange<9.40
AND
siemenssiprotec_5_7sj85Matchcp300
Node
siemenssiprotec_5_7sj86_firmware
AND
siemenssiprotec_5_7sj86Matchcp200
Node
siemenssiprotec_5_7sj86_firmwareRange<9.40
AND
siemenssiprotec_5_7sj86Matchcp300
Node
siemenssiprotec_5_7sk82_firmware
AND
siemenssiprotec_5_7sk82Matchcp100
Node
siemenssiprotec_5_7sk82_firmwareRange<9.40
AND
siemenssiprotec_5_7sk82Matchcp150
Node
siemenssiprotec_5_7sk85_firmware
AND
siemenssiprotec_5_7sk85Matchcp200
Node
siemenssiprotec_5_7sk85_firmwareRange<9.40
AND
siemenssiprotec_5_7sk85Matchcp300
Node
siemenssiprotec_5_7sl82_firmware
AND
siemenssiprotec_5_7sl82Matchcp100
Node
siemenssiprotec_5_7sl82_firmwareRange<9.40
AND
siemenssiprotec_5_7sl82Matchcp150
Node
siemenssiprotec_5_7sl86_firmware
AND
siemenssiprotec_5_7sl86Matchcp200
Node
siemenssiprotec_5_7sl86_firmwareRange<9.40
AND
siemenssiprotec_5_7sl86Matchcp300
Node
siemenssiprotec_5_7sl87_firmware
AND
siemenssiprotec_5_7sl87Matchcp200
Node
siemenssiprotec_5_7sl87_firmwareRange<9.40
AND
siemenssiprotec_5_7sl87Matchcp300
Node
siemenssiprotec_5_7ss85_firmware
AND
siemenssiprotec_5_7ss85Matchcp200
Node
siemenssiprotec_5_7ss85_firmwareRange<9.40
AND
siemenssiprotec_5_7ss85Matchcp300
Node
siemenssiprotec_5_7st85_firmware
AND
siemenssiprotec_5_7st85Matchcp200
Node
siemenssiprotec_5_7st85_firmware
AND
siemenssiprotec_5_7st85Matchcp300
Node
siemenssiprotec_5_7sx85_firmwareRange<9.40
AND
siemenssiprotec_5_7sx85Matchcp300
Node
siemenssiprotec_5_7um85_firmwareRange<9.40
AND
siemenssiprotec_5_7um85Matchcp300
Node
siemenssiprotec_5_7ut82_firmware
AND
siemenssiprotec_5_7ut82Matchcp100
Node
siemenssiprotec_5_7ut82_firmwareRange<9.40
AND
siemenssiprotec_5_7ut82Matchcp150
Node
siemenssiprotec_5_7ut85_firmware
AND
siemenssiprotec_5_7ut85Matchcp200
Node
siemenssiprotec_5_7ut85_firmwareRange<9.40
AND
siemenssiprotec_5_7ut85Matchcp300
Node
siemenssiprotec_5_7ut86_firmware
AND
siemenssiprotec_5_7ut86Matchcp200
Node
siemenssiprotec_5_7ut86_firmwareRange<9.40
AND
siemenssiprotec_5_7ut86Matchcp300
Node
siemenssiprotec_5_7ut87_firmware
AND
siemenssiprotec_5_7ut87Matchcp200
Node
siemenssiprotec_5_7ut87_firmwareRange<9.40
AND
siemenssiprotec_5_7ut87Matchcp300
Node
siemenssiprotec_5_7ve85_firmwareRange<9.40
AND
siemenssiprotec_5_7ve85Matchcp300
Node
siemenssiprotec_5_7vk87_firmware
AND
siemenssiprotec_5_7vk87Matchcp200
Node
siemenssiprotec_5_7vk87_firmwareRange<9.40
AND
siemenssiprotec_5_7vk87Matchcp300
Node
siemenssiprotec_5_communication_module_ethba2el_firmwareRange<9.40
AND
siemenssiprotec_5_communication_module_ethba2elMatch-
Node
siemenssiprotec_5_communication_module_ethbb2fo_firmwareRange<9.40
AND
siemenssiprotec_5_communication_module_ethbb2foMatch-
Node
siemenssiprotec_5_communication_module_ethbd2fo_firmwareRange<9.40
AND
siemenssiprotec_5_communication_module_ethbd2foMatch-
Node
siemenssiprotec_5_compact_7sx800_firmwareRange<9.40
AND
siemenssiprotec_5_compact_7sx800Matchcp050
Node
siemenssiprotec_5_7sa84_firmware
AND
siemenssiprotec_5_7sa84Matchcp200
Node
siemenssiprotec_5_7sd84_firmware
AND
siemenssiprotec_5_7sd84Matchcp200
Node
siemenssiprotec_5_7st86_firmware
AND
siemenssiprotec_5_7st86Matchcp300
Node
siemenssiprotec_5_7sx82_firmwareRange<9.40
AND
siemenssiprotec_5_7sx82Matchcp150
Node
siemenssiprotec_5_7vu85_firmwareRange<9.40
AND
siemenssiprotec_5_7vu85Matchcp300

CNA Affected

[
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 6MD85 (CP300)",
    "versions": [
      {
        "status": "affected",
        "version": "V7.80",
        "lessThan": "V9.40",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 6MD86 (CP300)",
    "versions": [
      {
        "status": "affected",
        "version": "V7.80",
        "lessThan": "V9.40",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 6MD89 (CP300)",
    "versions": [
      {
        "status": "affected",
        "version": "V7.80",
        "lessThan": "V9.64",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 6MU85 (CP300)",
    "versions": [
      {
        "status": "affected",
        "version": "V7.80",
        "lessThan": "V9.40",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 7KE85 (CP300)",
    "versions": [
      {
        "status": "affected",
        "version": "V7.80",
        "lessThan": "V9.40",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 7SA82 (CP100)",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "*",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 7SA82 (CP150)",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V9.40",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 7SA86 (CP300)",
    "versions": [
      {
        "status": "affected",
        "version": "V7.80",
        "lessThan": "V9.40",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 7SA87 (CP300)",
    "versions": [
      {
        "status": "affected",
        "version": "V7.80",
        "lessThan": "V9.40",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 7SD82 (CP100)",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "*",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 7SD82 (CP150)",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V9.40",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 7SD86 (CP300)",
    "versions": [
      {
        "status": "affected",
        "version": "V7.80",
        "lessThan": "V9.40",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 7SD87 (CP300)",
    "versions": [
      {
        "status": "affected",
        "version": "V7.80",
        "lessThan": "V9.40",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 7SJ81 (CP100)",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V8.89",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 7SJ81 (CP150)",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V9.40",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 7SJ82 (CP100)",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V8.89",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 7SJ82 (CP150)",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V9.40",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 7SJ85 (CP300)",
    "versions": [
      {
        "status": "affected",
        "version": "V7.80",
        "lessThan": "V9.40",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 7SJ86 (CP300)",
    "versions": [
      {
        "status": "affected",
        "version": "V7.80",
        "lessThan": "V9.40",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 7SK82 (CP100)",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V8.89",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 7SK82 (CP150)",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V9.40",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 7SK85 (CP300)",
    "versions": [
      {
        "status": "affected",
        "version": "V7.80",
        "lessThan": "V9.40",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 7SL82 (CP100)",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "*",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 7SL82 (CP150)",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V9.40",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 7SL86 (CP300)",
    "versions": [
      {
        "status": "affected",
        "version": "V7.80",
        "lessThan": "V9.40",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 7SL87 (CP300)",
    "versions": [
      {
        "status": "affected",
        "version": "V7.80",
        "lessThan": "V9.40",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 7SS85 (CP300)",
    "versions": [
      {
        "status": "affected",
        "version": "V7.80",
        "lessThan": "V9.40",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 7ST85 (CP300)",
    "versions": [
      {
        "status": "affected",
        "version": "V7.80",
        "lessThan": "V9.64",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 7ST86 (CP300)",
    "versions": [
      {
        "status": "affected",
        "version": "V7.80",
        "lessThan": "V9.40",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 7SX82 (CP150)",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V9.40",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 7SX85 (CP300)",
    "versions": [
      {
        "status": "affected",
        "version": "V7.80",
        "lessThan": "V9.40",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 7UM85 (CP300)",
    "versions": [
      {
        "status": "affected",
        "version": "V7.80",
        "lessThan": "V9.40",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 7UT82 (CP100)",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "*",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 7UT82 (CP150)",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V9.40",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 7UT85 (CP300)",
    "versions": [
      {
        "status": "affected",
        "version": "V7.80",
        "lessThan": "V9.40",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 7UT86 (CP300)",
    "versions": [
      {
        "status": "affected",
        "version": "V7.80",
        "lessThan": "V9.40",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 7UT87 (CP300)",
    "versions": [
      {
        "status": "affected",
        "version": "V7.80",
        "lessThan": "V9.40",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 7VE85 (CP300)",
    "versions": [
      {
        "status": "affected",
        "version": "V7.80",
        "lessThan": "V9.40",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 7VK87 (CP300)",
    "versions": [
      {
        "status": "affected",
        "version": "V7.80",
        "lessThan": "V9.40",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 7VU85 (CP300)",
    "versions": [
      {
        "status": "affected",
        "version": "V7.80",
        "lessThan": "V9.40",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 Communication Module ETH-BA-2EL",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V9.40",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 Communication Module ETH-BA-2EL",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V8.89",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 Communication Module ETH-BB-2FO",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V9.40",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 Communication Module ETH-BB-2FO",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V8.89",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 Communication Module ETH-BD-2FO",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V9.40",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 Compact 7SX800 (CP050)",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V9.40",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  }
]

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.6%

Related for CVE-2023-28766