CVE-2021-33720

A vulnerability has been identified in SIPROTEC 5 relays with CPU variants CP050 All versions V8.80, SIPROTEC 5 relays with CPU variants CP100 All versions V8.80, SIPROTEC 5 relays with CPU variants CP300 All versions V8.80. Specially crafted packets sent to port 4443/tcp could cause a...

CVE-2021-37206

A vulnerability has been identified in SIPROTEC 5 relays with CPU variants CP050 All versions V8.80, SIPROTEC 5 relays with CPU variants CP100 All versions V8.80, SIPROTEC 5 relays with CPU variants CP300 All versions V8.80. Received webpackets are not properly processed. An unauthenticated remot...

CVE-2021-37206

A vulnerability has been identified in SIPROTEC 5 relays with CPU variants CP050 All versions V8.80, SIPROTEC 5 relays with CPU variants CP100 All versions V8.80, SIPROTEC 5 relays with CPU variants CP300 All versions V8.80. Received webpackets are not properly processed. An unauthenticated remot...

CVE-2021-37206

Siemens SIPROTEC 5 relays with CPU variants CP050, CP100, or CP300 (all versions prior to v8.80) are affected by CVE-2021-37206. The vulnerability arises from improper handling of received web/webpackets, allowing an unauthenticated remote attacker with access to any Ethernet interface to send sp...

CVE-2021-33720

Siemens SIPROTEC 5 relays with CPU variants CP050, CP100, or CP300 (all versions before 8.80) are affected by CVE-2021-33720 a classic buffer overflow (Buffer copy without checking size) caused by specially crafted packets sent to port 4443/TCP. This can cause a Denial-of-Service condition; ICS a...

CVE-2021-33720

A vulnerability has been identified in SIPROTEC 5 relays with CPU variants CP050 All versions V8.80, SIPROTEC 5 relays with CPU variants CP100 All versions V8.80, SIPROTEC 5 relays with CPU variants CP300 All versions V8.80. Specially crafted packets sent to port 4443/tcp could cause a...

CVE-2021-33719

A vulnerability has been identified in SIPROTEC 5 relays with CPU variants CP050 All versions V8.80, SIPROTEC 5 relays with CPU variants CP100 All versions V8.80, SIPROTEC 5 relays with CPU variants CP300 All versions V8.80. Specially crafted packets sent to port 4443/tcp could cause a...

CVE-2021-33719

The CVE-2021-33719 issue affects SIPROTEC 5 relays with CPU variants CP050, CP100, and CP300, where specially crafted packets to TCP port 4443 may cause a Denial-of-Service or remote code execution. Affected versions are all before V8.80. Siemens has released updates to v8.80 or later for CP050/C...

Siemens SIPROTEC 5 代码注入漏洞

Siemens SIPROTEC 5 is a multifunction relay from Siemens, Germany. A buffer overflow vulnerability exists in Siemens SIPROTEC 5 relays. An attacker can exploit the vulnerability by sending a constructed packet to port 4443/TCP, resulting in a denial of service condition or remote code execution...

CVE-2021-33720: Buffer Copy without Checking Size of Input

A vulnerability has been identified in SIPROTEC 5 relays with CPU variants CP050 All versions V8.80, SIPROTEC 5 relays with CPU variants CP100 All versions V8.80, SIPROTEC 5 relays with CPU variants CP300 All versions V8.80. Specially crafted packets sent to port 4443/tcp could cause a...

Siemens SIPROTEC 5输入验证错误漏洞

Siemens SIPROTEC 5 is a multifunction relay from Siemens, Germany. Siemens SIPROTEC 5 suffers from an Input Authentication Error vulnerability that arises from incoming webpackets that are not handled correctly. An unauthenticated, remote attacker with access to any Ethernet interface could explo...

PT-2021-21574

Name of the Vulnerable Software and Affected Versions SIPROTEC 5 relays with CPU variants CP050 versions prior to V8.80 SIPROTEC 5 relays with CPU variants CP100 versions prior to V8.80 SIPROTEC 5 relays with CPU variants CP200 versions prior to V8.80 SIPROTEC 5 relays with CPU variants CP300...

CVE-2021-33719: Buffer Copy without Checking Size of Input

A vulnerability has been identified in SIPROTEC 5 relays with CPU variants CP050 All versions V8.80, SIPROTEC 5 relays with CPU variants CP100 All versions V8.80, SIPROTEC 5 relays with CPU variants CP300 All versions V8.80. Specially crafted packets sent to port 4443/tcp could cause a...

Siemens SIPROTEC 5 代码注入漏洞

Siemens SIPROTEC 5 is a multifunction relay from Siemens, Germany. A buffer overflow vulnerability exists in the Siemens SIPROTEC 5 relays, which can be exploited by an attacker to send a constructed packet to port 4443/TCP, resulting in a denial of service condition...

PT-2021-4201

Name of the Vulnerable Software and Affected Versions SIPROTEC 5 relays with CPU variants CP050 versions prior to V8.80 SIPROTEC 5 relays with CPU variants CP100 versions prior to V8.80 SIPROTEC 5 relays with CPU variants CP200 versions prior to V8.80 SIPROTEC 5 relays with CPU variants CP300...

PT-2021-20295

Name of the Vulnerable Software and Affected Versions: SIPROTEC 5 relays with CPU variants CP050 versions prior to V8.80 SIPROTEC 5 relays with CPU variants CP100 versions prior to V8.80 SIPROTEC 5 relays with CPU variants CP300 versions prior to V8.80 Description: A Denial-of-Service condition c...

CVE-2021-37206: Improper Input Validation

A vulnerability has been identified in SIPROTEC 5 relays with CPU variants CP050 All versions V8.80, SIPROTEC 5 relays with CPU variants CP100 All versions V8.80, SIPROTEC 5 relays with CPU variants CP300 All versions V8.80. Received webpackets are not properly processed. An unauthenticated remot...

Siemens SIPROTEC 5 relays (Update A)

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: SIPROTEC 5 relays Vulnerabilities: Classic Buffer Overflow 2. UPDATE INFORMATION This updated advisory is a follow-up to the original advisory titled ICSA-21-257-10 Siemens SIPROTEC 5...

Siemens SIPROTEC 5 (Update A)

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: SIPROTEC 5 Vulnerability: Improper Input Validation 2. UPDATE INFORMATION This updated advisory is a follow-up to the original advisory titled ICSA-21-257-16 Siemens SIPROTEC 5 that...

SIPROTEC Relay Protection Device Input Validation

The vulnerability of SIPROTEC relay protection devices is related to insufficient verification of input data. Exploiting this vulnerability can allow attackers to trigger a service failure using specially created packets sent to port 50000/UDP...