CVE-2022-45044

Published: Dic 13, 2022 Last Modified: Nov 11, 2025 EU-VD ID: EUVD-2022-47969 Aliases: GSD-2022-45044
ExploitDB:
Other exploit source:
Google Dorks:
MEDIUM 5,3
Source: [email protected]
Attack Vector: network
Attack Complexity: low
Privileges Required: none
User Interaction: none
Scope: unchanged
Confidentiality: none
Integrity: none
Availability: low

Description

AI Translation Available

A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V9.50), SIPROTEC 5 6MD85 (CP200) (All versions), SIPROTEC 5 6MD85 (CP300) (All versions < V9.50), SIPROTEC 5 6MD86 (CP200) (All versions), SIPROTEC 5 6MD86 (CP300) (All versions < V9.50), SIPROTEC 5 6MD89 (CP300) (All versions < V9.64), SIPROTEC 5 6MU85 (CP300) (All versions < V9.50), SIPROTEC 5 7KE85 (CP200) (All versions), SIPROTEC 5 7KE85 (CP300) (All versions < V9.64), SIPROTEC 5 7SA82 (CP100) (All versions < V8.90), SIPROTEC 5 7SA82 (CP150) (All versions < V9.50), SIPROTEC 5 7SA84 (CP200) (All versions), SIPROTEC 5 7SA86 (CP200) (All versions), SIPROTEC 5 7SA86 (CP300) (All versions < V9.50), SIPROTEC 5 7SA87 (CP200) (All versions), SIPROTEC 5 7SA87 (CP300) (All versions < V9.50), SIPROTEC 5 7SD82 (CP100) (All versions < V8.90), SIPROTEC 5 7SD82 (CP150) (All versions < V9.50), SIPROTEC 5 7SD84 (CP200) (All versions), SIPROTEC 5 7SD86 (CP200) (All versions), SIPROTEC 5 7SD86 (CP300) (All versions < V9.50), SIPROTEC 5 7SD87 (CP200) (All versions), SIPROTEC 5 7SD87 (CP300) (All versions < V9.50), SIPROTEC 5 7SJ81 (CP100) (All versions < V8.89), SIPROTEC 5 7SJ81 (CP150) (All versions < V9.50), SIPROTEC 5 7SJ82 (CP100) (All versions < V8.89), SIPROTEC 5 7SJ82 (CP150) (All versions < V9.50), SIPROTEC 5 7SJ85 (CP200) (All versions), SIPROTEC 5 7SJ85 (CP300) (All versions < V9.50), SIPROTEC 5 7SJ86 (CP200) (All versions), SIPROTEC 5 7SJ86 (CP300) (All versions < V9.50), SIPROTEC 5 7SK82 (CP100) (All versions < V8.89), SIPROTEC 5 7SK82 (CP150) (All versions < V9.50), SIPROTEC 5 7SK85 (CP200) (All versions), SIPROTEC 5 7SK85 (CP300) (All versions < V9.50), SIPROTEC 5 7SL82 (CP100) (All versions < V8.90), SIPROTEC 5 7SL82 (CP150) (All versions < V9.50), SIPROTEC 5 7SL86 (CP200) (All versions), SIPROTEC 5 7SL86 (CP300) (All versions < V9.50), SIPROTEC 5 7SL87 (CP200) (All versions), SIPROTEC 5 7SL87 (CP300) (All versions < V9.50), SIPROTEC 5 7SS85 (CP200) (All versions), SIPROTEC 5 7SS85 (CP300) (All versions < V9.50), SIPROTEC 5 7ST85 (CP200) (All versions), SIPROTEC 5 7ST85 (CP300) (All versions < V9.64), SIPROTEC 5 7ST86 (CP300) (All versions < V9.64), SIPROTEC 5 7SX82 (CP150) (All versions < V9.50), SIPROTEC 5 7SX85 (CP300) (All versions < V9.50), SIPROTEC 5 7UM85 (CP300) (All versions < V9.50), SIPROTEC 5 7UT82 (CP100) (All versions < V8.90), SIPROTEC 5 7UT82 (CP150) (All versions < V9.50), SIPROTEC 5 7UT85 (CP200) (All versions), SIPROTEC 5 7UT85 (CP300) (All versions < V9.50), SIPROTEC 5 7UT86 (CP200) (All versions), SIPROTEC 5 7UT86 (CP300) (All versions < V9.50), SIPROTEC 5 7UT87 (CP200) (All versions), SIPROTEC 5 7UT87 (CP300) (All versions < V9.50), SIPROTEC 5 7VE85 (CP300) (All versions < V9.50), SIPROTEC 5 7VK87 (CP200) (All versions), SIPROTEC 5 7VK87 (CP300) (All versions < V9.50), SIPROTEC 5 7VU85 (CP300) (All versions < V9.50), SIPROTEC 5 Communication Module ETH-BA-2EL (Rev.1) (All versions installed on CP200 devices), SIPROTEC 5 Communication Module ETH-BA-2EL (Rev.1) (All versions < V9.50 installed on CP150 and CP300 devices), SIPROTEC 5 Communication Module ETH-BA-2EL (Rev.1) (All versions < V8.89 installed on CP100 devices), SIPROTEC 5 Communication Module ETH-BB-2FO (Rev. 1) (All versions installed on CP200 devices), SIPROTEC 5 Communication Module ETH-BB-2FO (Rev. 1) (All versions < V9.50 installed on CP150 and CP300 devices), SIPROTEC 5 Communication Module ETH-BB-2FO (Rev. 1) (All versions < V8.89 installed on CP100 devices), SIPROTEC 5 Communication Module ETH-BD-2FO (All versions < V9.50), SIPROTEC 5 Compact 7SX800 (CP050) (All versions < V9.50). Affected devices do not properly restrict secure client-initiated renegotiations within the SSL and TLS protocols. This could allow an attacker to create a denial of service condition on the ports 443/tcp and 4443/tcp for the duration of the attack.

EPSS (Exploit Prediction Scoring System)

Trend Analysis

EPSS (Exploit Prediction Scoring System)

Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.

EPSS Score
0,0057
Percentile
0,7th
Updated

EPSS Score Trend (Last 90 Days)

400

Uncontrolled Resource Consumption

Draft
Abstraction: Class Structure: Simple
Common Consequences
Security Scopes Affected:
Availability Access Control Other
Potential Impacts:
Dos: Crash, Exit, Or Restart Dos: Resource Consumption (Cpu) Dos: Resource Consumption (Memory) Dos: Resource Consumption (Other) Bypass Protection Mechanism Other
Applicable Platforms
All platforms may be affected
Likelihood of Exploit: High
View CWE Details
Operating System

Siprotec 5 7Sl87 Firmware by Siemens

Product Information
Vendor Siemens
Product Siprotec 5 7Sl87 Firmware
Version -
cpe:2.3:o:siemens:siprotec_5_7sl87_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Siprotec 5 7Ke85 Firmware by Siemens

Product Information
Vendor Siemens
Product Siprotec 5 7Ke85 Firmware
Version -
cpe:2.3:o:siemens:siprotec_5_7ke85_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Siprotec 5 7Ut86 Firmware by Siemens

Product Information
Vendor Siemens
Product Siprotec 5 7Ut86 Firmware
Version -
cpe:2.3:o:siemens:siprotec_5_7ut86_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Siprotec 5 7Sx85 Firmware by Siemens

Product Information
Vendor Siemens
Product Siprotec 5 7Sx85 Firmware
Version -
cpe:2.3:o:siemens:siprotec_5_7sx85_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Siprotec 5 7Sd87 Firmware by Siemens

Product Information
Vendor Siemens
Product Siprotec 5 7Sd87 Firmware
Version -
cpe:2.3:o:siemens:siprotec_5_7sd87_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Siprotec 5 Communication Module Ethbb2Fo Firmware by Siemens

Product Information
Vendor Siemens
Product Siprotec 5 Communication Module Ethbb2Fo Firmware
Version -
cpe:2.3:o:siemens:siprotec_5_communication_module_ethbb2fo_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Siprotec 5 7Sa87 Firmware by Siemens

Product Information
Vendor Siemens
Product Siprotec 5 7Sa87 Firmware
Version -
cpe:2.3:o:siemens:siprotec_5_7sa87_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Siprotec 5 7Sj86 Firmware by Siemens

Product Information
Vendor Siemens
Product Siprotec 5 7Sj86 Firmware
Version -
cpe:2.3:o:siemens:siprotec_5_7sj86_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Siprotec 5 Compact 7Sx800 Firmware by Siemens

Product Information
Vendor Siemens
Product Siprotec 5 Compact 7Sx800 Firmware
Version -
cpe:2.3:o:siemens:siprotec_5_compact_7sx800_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Siprotec 5 7Sk82 Firmware by Siemens

Product Information
Vendor Siemens
Product Siprotec 5 7Sk82 Firmware
Version -
cpe:2.3:o:siemens:siprotec_5_7sk82_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Siprotec 5 7Um85 Firmware by Siemens

Product Information
Vendor Siemens
Product Siprotec 5 7Um85 Firmware
Version -
cpe:2.3:o:siemens:siprotec_5_7um85_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Siprotec 5 7Sl82 Firmware by Siemens

Product Information
Vendor Siemens
Product Siprotec 5 7Sl82 Firmware
Version -
cpe:2.3:o:siemens:siprotec_5_7sl82_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Siprotec 5 6Mu85 Firmware by Siemens

Product Information
Vendor Siemens
Product Siprotec 5 6Mu85 Firmware
Version -
cpe:2.3:o:siemens:siprotec_5_6mu85_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Siprotec 5 7Ss85 Firmware by Siemens

Product Information
Vendor Siemens
Product Siprotec 5 7Ss85 Firmware
Version -
cpe:2.3:o:siemens:siprotec_5_7ss85_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Siprotec 5 7Sd86 Firmware by Siemens

Product Information
Vendor Siemens
Product Siprotec 5 7Sd86 Firmware
Version -
cpe:2.3:o:siemens:siprotec_5_7sd86_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Siprotec 5 7Ut87 Firmware by Siemens

Product Information
Vendor Siemens
Product Siprotec 5 7Ut87 Firmware
Version -
cpe:2.3:o:siemens:siprotec_5_7ut87_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Siprotec 5 7Sa82 Firmware by Siemens

Product Information
Vendor Siemens
Product Siprotec 5 7Sa82 Firmware
Version -
cpe:2.3:o:siemens:siprotec_5_7sa82_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Siprotec 5 7Sa86 Firmware by Siemens

Product Information
Vendor Siemens
Product Siprotec 5 7Sa86 Firmware
Version -
cpe:2.3:o:siemens:siprotec_5_7sa86_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Siprotec 5 7Vk87 Firmware by Siemens

Product Information
Vendor Siemens
Product Siprotec 5 7Vk87 Firmware
Version -
cpe:2.3:o:siemens:siprotec_5_7vk87_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Siprotec 5 7Sj85 Firmware by Siemens

Product Information
Vendor Siemens
Product Siprotec 5 7Sj85 Firmware
Version -
cpe:2.3:o:siemens:siprotec_5_7sj85_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Siprotec 5 6Md86 Firmware by Siemens

Product Information
Vendor Siemens
Product Siprotec 5 6Md86 Firmware
Version -
cpe:2.3:o:siemens:siprotec_5_6md86_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Siprotec 5 7Sd82 Firmware by Siemens

Product Information
Vendor Siemens
Product Siprotec 5 7Sd82 Firmware
Version -
cpe:2.3:o:siemens:siprotec_5_7sd82_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Siprotec 5 7Sk85 Firmware by Siemens

Product Information
Vendor Siemens
Product Siprotec 5 7Sk85 Firmware
Version -
cpe:2.3:o:siemens:siprotec_5_7sk85_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Siprotec 5 7Ve85 Firmware by Siemens

Product Information
Vendor Siemens
Product Siprotec 5 7Ve85 Firmware
Version -
cpe:2.3:o:siemens:siprotec_5_7ve85_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Siprotec 5 7Sj82 Firmware by Siemens

Product Information
Vendor Siemens
Product Siprotec 5 7Sj82 Firmware
Version -
cpe:2.3:o:siemens:siprotec_5_7sj82_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Siprotec 5 7St85 Firmware by Siemens

Product Information
Vendor Siemens
Product Siprotec 5 7St85 Firmware
Version -
cpe:2.3:o:siemens:siprotec_5_7st85_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Siprotec 5 6Md89 Firmware by Siemens

Product Information
Vendor Siemens
Product Siprotec 5 6Md89 Firmware
Version -
cpe:2.3:o:siemens:siprotec_5_6md89_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Siprotec 5 Communication Module Ethbd2Fo Firmware by Siemens

Product Information
Vendor Siemens
Product Siprotec 5 Communication Module Ethbd2Fo Firmware
Version -
cpe:2.3:o:siemens:siprotec_5_communication_module_ethbd2fo_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Siprotec 5 7Ut82 Firmware by Siemens

Product Information
Vendor Siemens
Product Siprotec 5 7Ut82 Firmware
Version -
cpe:2.3:o:siemens:siprotec_5_7ut82_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Siprotec 5 7Ut85 Firmware by Siemens

Product Information
Vendor Siemens
Product Siprotec 5 7Ut85 Firmware
Version -
cpe:2.3:o:siemens:siprotec_5_7ut85_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Siprotec 5 7Sj81 Firmware by Siemens

Product Information
Vendor Siemens
Product Siprotec 5 7Sj81 Firmware
Version -
cpe:2.3:o:siemens:siprotec_5_7sj81_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Siprotec 5 6Md85 Firmware by Siemens

Product Information
Vendor Siemens
Product Siprotec 5 6Md85 Firmware
Version -
cpe:2.3:o:siemens:siprotec_5_6md85_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Siprotec 5 7Sl86 Firmware by Siemens

Product Information
Vendor Siemens
Product Siprotec 5 7Sl86 Firmware
Version -
cpe:2.3:o:siemens:siprotec_5_7sl86_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Siprotec 5 Communication Module Ethba2El Firmware by Siemens

Product Information
Vendor Siemens
Product Siprotec 5 Communication Module Ethba2El Firmware
Version -
cpe:2.3:o:siemens:siprotec_5_communication_module_ethba2el_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
https://cert-portal.siemens.com/productcert/html/ssa-552874…
https://cert-portal.siemens.com/productcert/html/ssa-552874.html
https://cert-portal.siemens.com/productcert/pdf/ssa-552874.…
https://cert-portal.siemens.com/productcert/pdf/ssa-552874.pdf
https://cert-portal.siemens.com/productcert/html/ssa-552874…
https://cert-portal.siemens.com/productcert/html/ssa-552874.html
https://cert-portal.siemens.com/productcert/pdf/ssa-552874.…
https://cert-portal.siemens.com/productcert/pdf/ssa-552874.pdf