CVE-2024-53651

MediumCVSS 4.6/10Last modified Jun 17, 2026

Description

A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions), SIPROTEC 5 6MD85 (CP200) (All versions), SIPROTEC 5 6MD85 (CP300) (All versions), SIPROTEC 5 6MD86 (CP200) (All versions), SIPROTEC 5 6MD86 (CP300) (All versions), SIPROTEC 5 6MD89 (CP300) (All versions), SIPROTEC 5 6MU85 (CP300) (All versions), SIPROTEC 5 7KE85 (CP200) (All versions), SIPROTEC 5 7KE85 (CP300) (All versions), SIPROTEC 5 7SA82 (CP100) (All versions), SIPROTEC 5 7SA82 (CP150) (All versions), SIPROTEC 5 7SA86 (CP200) (All versions), SIPROTEC 5 7SA86 (CP300) (All versions), SIPROTEC 5 7SA87 (CP200) (All versions), SIPROTEC 5 7SA87 (CP300) (All versions), SIPROTEC 5 7SD82 (CP100) (All versions), SIPROTEC 5 7SD82 (CP150) (All versions), SIPROTEC 5 7SD86 (CP200) (All versions), SIPROTEC 5 7SD86 (CP300) (All versions), SIPROTEC 5 7SD87 (CP200) (All versions), SIPROTEC 5 7SD87 (CP300) (All versions), SIPROTEC 5 7SJ81 (CP100) (All versions), SIPROTEC 5 7SJ81 (CP150) (All versions), SIPROTEC 5 7SJ82 (CP100) (All versions), SIPROTEC 5 7SJ82 (CP150) (All versions), SIPROTEC 5 7SJ85 (CP200) (All versions), SIPROTEC 5 7SJ85 (CP300) (All versions), SIPROTEC 5 7SJ86 (CP200) (All versions), SIPROTEC 5 7SJ86 (CP300) (All versions), SIPROTEC 5 7SK82 (CP100) (All versions), SIPROTEC 5 7SK82 (CP150) (All versions), SIPROTEC 5 7SK85 (CP200) (All versions), SIPROTEC 5 7SK85 (CP300) (All versions), SIPROTEC 5 7SL82 (CP100) (All versions), SIPROTEC 5 7SL82 (CP150) (All versions), SIPROTEC 5 7SL86 (CP200) (All versions), SIPROTEC 5 7SL86 (CP300) (All versions), SIPROTEC 5 7SL87 (CP200) (All versions), SIPROTEC 5 7SL87 (CP300) (All versions), SIPROTEC 5 7SS85 (CP200) (All versions), SIPROTEC 5 7SS85 (CP300) (All versions), SIPROTEC 5 7ST85 (CP200) (All versions), SIPROTEC 5 7ST85 (CP300) (All versions), SIPROTEC 5 7ST86 (CP300) (All versions), SIPROTEC 5 7SX82 (CP150) (All versions), SIPROTEC 5 7SX85 (CP300) (All versions), SIPROTEC 5 7SY82 (CP150) (All versions), SIPROTEC 5 7UM85 (CP300) (All versions), SIPROTEC 5 7UT82 (CP100) (All versions), SIPROTEC 5 7UT82 (CP150) (All versions), SIPROTEC 5 7UT85 (CP200) (All versions), SIPROTEC 5 7UT85 (CP300) (All versions), SIPROTEC 5 7UT86 (CP200) (All versions), SIPROTEC 5 7UT86 (CP300) (All versions), SIPROTEC 5 7UT87 (CP200) (All versions), SIPROTEC 5 7UT87 (CP300) (All versions), SIPROTEC 5 7VE85 (CP300) (All versions), SIPROTEC 5 7VK87 (CP200) (All versions), SIPROTEC 5 7VK87 (CP300) (All versions), SIPROTEC 5 7VU85 (CP300) (All versions), SIPROTEC 5 Compact 7SX800 (CP050) (All versions). Affected devices do not encrypt certain data within the on-board flash storage on their PCB. This could allow an attacker with physical access to read the entire filesystem of the device.

Metrics

CVSS 3.1 4.6/10CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

Affected software

VendorProductVersions
SiemensSIPROTEC 5 6MD84 (CP300)< *
SiemensSIPROTEC 5 6MD85 (CP200)< *
SiemensSIPROTEC 5 6MD85 (CP300)< *
SiemensSIPROTEC 5 6MD86 (CP200)< *
SiemensSIPROTEC 5 6MD86 (CP300)< *
SiemensSIPROTEC 5 6MD89 (CP300)< *
SiemensSIPROTEC 5 6MU85 (CP300)< *
SiemensSIPROTEC 5 7KE85 (CP200)< *
SiemensSIPROTEC 5 7KE85 (CP300)< *
SiemensSIPROTEC 5 7SA82 (CP100)< *
SiemensSIPROTEC 5 7SA82 (CP150)< *
SiemensSIPROTEC 5 7SA86 (CP200)< *
SiemensSIPROTEC 5 7SA86 (CP300)< *
SiemensSIPROTEC 5 7SA87 (CP200)< *
SiemensSIPROTEC 5 7SA87 (CP300)< *
SiemensSIPROTEC 5 7SD82 (CP100)< *
SiemensSIPROTEC 5 7SD82 (CP150)< *
SiemensSIPROTEC 5 7SD86 (CP200)< *
SiemensSIPROTEC 5 7SD86 (CP300)< *
SiemensSIPROTEC 5 7SD87 (CP200)< *
SiemensSIPROTEC 5 7SD87 (CP300)< *
SiemensSIPROTEC 5 7SJ81 (CP100)< *
SiemensSIPROTEC 5 7SJ81 (CP150)< *
SiemensSIPROTEC 5 7SJ82 (CP100)< *
SiemensSIPROTEC 5 7SJ82 (CP150)< *
SiemensSIPROTEC 5 7SJ85 (CP200)< *
SiemensSIPROTEC 5 7SJ85 (CP300)< *
SiemensSIPROTEC 5 7SJ86 (CP200)< *
SiemensSIPROTEC 5 7SJ86 (CP300)< *
SiemensSIPROTEC 5 7SK82 (CP100)< *
SiemensSIPROTEC 5 7SK82 (CP150)< *
SiemensSIPROTEC 5 7SK85 (CP200)< *
SiemensSIPROTEC 5 7SK85 (CP300)< *
SiemensSIPROTEC 5 7SL82 (CP100)< *
SiemensSIPROTEC 5 7SL82 (CP150)< *
SiemensSIPROTEC 5 7SL86 (CP200)< *
SiemensSIPROTEC 5 7SL86 (CP300)< *
SiemensSIPROTEC 5 7SL87 (CP200)< *
SiemensSIPROTEC 5 7SL87 (CP300)< *
SiemensSIPROTEC 5 7SS85 (CP200)< *
SiemensSIPROTEC 5 7SS85 (CP300)< *
SiemensSIPROTEC 5 7ST85 (CP200)< *
SiemensSIPROTEC 5 7ST85 (CP300)< *
SiemensSIPROTEC 5 7ST86 (CP300)< *
SiemensSIPROTEC 5 7SX82 (CP150)< *
SiemensSIPROTEC 5 7SX85 (CP300)< *
SiemensSIPROTEC 5 7SY82 (CP150)< *
SiemensSIPROTEC 5 7UM85 (CP300)< *
SiemensSIPROTEC 5 7UT82 (CP100)< *
SiemensSIPROTEC 5 7UT82 (CP150)< *

References

Timeline

Published
Feb 11, 2025
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2024

CVE-2024-53666.5A vulnerability has been found in SourceCodester Best House Rental Management System up to 1.0 and classified as critical. This vulnerabilitCVE-2024-53676.1A vulnerability was found in Kashipara College Management System 1.0 and classified as problematic. This issue affects some unknown processiCVE-2024-536726.3A vulnerability in the ClearPass Policy Manager web-based management interface allows remote authenticated users to run arbitrary commands oCVE-2024-536739.8A java deserialization vulnerability in HPE Remote Insight Support may allow an unauthenticated attacker to execute code.CVE-2024-536747.5An XML external entity injection (XXE) vulnerability in HPE Insight Remote Support may allow remote users to disclose information in certainCVE-2024-536757.5An XML external entity injection (XXE) vulnerability in HPE Insight Remote Support may allow remote users to disclose information in certainCVE-2024-536769.8A directory traversal vulnerability in Hewlett Packard Enterprise Insight Remote Support may allow remote code execution.CVE-2024-536779.8File upload logic in Apache Struts is flawed. An attacker can manipulate file upload params to enable paths traversal and under some circumsCVE-2024-536788.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache VCL. Users can modify form dataCVE-2024-536795.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache VCL in the User Lookup form. A CVE-2024-53686.1A vulnerability was found in Kashipara College Management System 1.0. It has been classified as problematic. Affected is an unknown functionCVE-2024-536805.5In the Linux kernel, the following vulnerability has been resolved: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init()