high7.5
CVE-2021-37206
A vulnerability has been identified in SIPROTEC 5 relays with CPU variants CP050 (All versions < V8.80), SIPROTEC 5 relays with CPU variants CP100 (All version…
Impact
A vulnerability has been identified in SIPROTEC 5 relays with CPU variants CP050 (All versions < V8.80), SIPROTEC 5 relays with CPU variants CP100 (All versions < V8.80), SIPROTEC 5 relays with CPU variants CP300 (All versions < V8.80). Received webpackets are not properly processed. An unauthenticated remote attacker with access to any of the Ethernet interfaces could send specially crafted packets to force a restart of the target device.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Siemens | Siprotec 5 With Cpu Variant Cp050 | before 8.80 |
| Siemens | Siprotec 5 With Cpu Variant Cp100 | before 8.80 |
| Siemens | Siprotec 5 With Cpu Variant Cp300 | before 8.80 |