Siemens SIPROTEC 5 Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in Siemens SIPROTEC 5 relays with CPU variants CP050, CP100, and CP300, all running versions prior to V8.80. The issue arises because received webpackets are not properly processed, allowing an unauthenticated remote attacker with access to any Ethernet interface to send specially crafted packets that force the target device to restart.

Impact

Exploitation of this vulnerability causes the device to restart, disrupting its normal operation and potentially leading to a temporary loss of functionality.

Remediation

Siemens has released a patch for this vulnerability. Users are advised to update to version V8.80 or later. For guidance on applying the update, refer to the Siemens support page for SIPROTEC 5.