vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2023-28766

HIGH
7.5
CVSS Score
Published: April 11, 2023 at 09:03 AM UTC
Updated: June 17, 2026 at 05:48 AM UTC
81 products affected across 1 vendorSiprotec 5 Communication Module ETHBD2FO FirmwareSiprotec 5 6MD85 FirmwareSiprotec 5 6MD86 Firmware

Using SIPROTEC 5 6MD85 (CP300) by Siemens?

Get instant alerts when new vulnerabilities affect SIPROTEC 5 6MD85 (CP300) - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
HIGH7.5
Exploit prediction
EPSS 0.9%

Description

A vulnerability has been identified in SIPROTEC 5 6MD85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 6MD86 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 6MD89 (CP300) (All versions >= V7.80 < V9.64), SIPROTEC 5 6MU85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7KE85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7SA82 (CP100) (All versions), SIPROTEC 5 7SA82 (CP150) (All versions < V9.40), SIPROTEC 5 7SA86 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7SA87 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7SD82 (CP100) (All versions), SIPROTEC 5 7SD82 (CP150) (All versions < V9.40), SIPROTEC 5 7SD86 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7SD87 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7SJ81 (CP100) (All versions < V8.89), SIPROTEC 5 7SJ81 (CP150) (All versions < V9.40), SIPROTEC 5 7SJ82 (CP100) (All versions < V8.89), SIPROTEC 5 7SJ82 (CP150) (All versions < V9.40), SIPROTEC 5 7SJ85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7SJ86 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7SK82 (CP100) (All versions < V8.89), SIPROTEC 5 7SK82 (CP150) (All versions < V9.40), SIPROTEC 5 7SK85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7SL82 (CP100) (All versions), SIPROTEC 5 7SL82 (CP150) (All versions < V9.40), SIPROTEC 5 7SL86 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7SL87 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7SS85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7ST85 (CP300) (All versions >= V7.80 < V9.64), SIPROTEC 5 7ST86 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7SX82 (CP150) (All versions < V9.40), SIPROTEC 5 7SX85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7UM85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7UT82 (CP100) (All versions), SIPROTEC 5 7UT82 (CP150) (All versions < V9.40), SIPROTEC 5 7UT85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7UT86 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7UT87 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7VE85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7VK87 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7VU85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 Communication Module ETH-BA-2EL (All versions < V9.40 installed on CP150 and CP300 devices), SIPROTEC 5 Communication Module ETH-BA-2EL (All versions < V8.89 installed on CP100 devices), SIPROTEC 5 Communication Module ETH-BB-2FO (All versions < V9.40 installed on CP150 and CP300 devices), SIPROTEC 5 Communication Module ETH-BB-2FO (All versions < V8.89 installed on CP100 devices), SIPROTEC 5 Communication Module ETH-BD-2FO (All versions < V9.40), SIPROTEC 5 Compact 7SX800 (CP050) (All versions < V9.40). Affected devices lack proper validation of http request parameters of the hosted web service. An unauthenticated remote attacker could send specially crafted packets that could cause denial of service condition of the target device.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Siprotec 5 6MD85 Firmware· Siemens
95%
v < 9.40
Affected range stops below 9.40, so it looks safe — our inference, not a vendor statement
siemens-siprotec-5-6md85 (same device)
Siprotec 5 6MD86 Firmware· Siemens
95%
v < 9.40
Affected range stops below 9.40, so it looks safe — our inference, not a vendor statement
siemens-siprotec-5-6md86 (same device)
Siprotec 5 6MD89 Firmware· Siemens
95%
All versions
siemens-siprotec-5-6md89 (same device)
Siprotec 5 6MU85 Firmware· Siemens
95%
v < 9.40
Affected range stops below 9.40, so it looks safe — our inference, not a vendor statement
siemens-siprotec-5-6mu85 (same device)
Siprotec 5 7KE85 Firmware· Siemens
95%
v < 9.40
Affected range stops below 9.40, so it looks safe — our inference, not a vendor statement
siemens-siprotec-5-7ke85 (same device)
Siprotec 5 7SA82 Firmware· Siemens
95%
v < 9.40
Affected range stops below 9.40, so it looks safe — our inference, not a vendor statement
siemens-siprotec-5-7sa82 (same device)
Siprotec 5 7SA84 Firmware· Siemens
95%
All versions
siemens-siprotec-5-7sa84 (same device)
Siprotec 5 7SA86 Firmware· Siemens
95%
v < 9.40
Affected range stops below 9.40, so it looks safe — our inference, not a vendor statement
siemens-siprotec-5-7sa86 (same device)
Siprotec 5 7SA87 Firmware· Siemens
95%
v < 9.40
Affected range stops below 9.40, so it looks safe — our inference, not a vendor statement
siemens-siprotec-5-7sa87 (same device)
Siprotec 5 7SD82 Firmware· Siemens
95%
v < 9.40
Affected range stops below 9.40, so it looks safe — our inference, not a vendor statement
siemens-siprotec-5-7sd82 (same device)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (2)

Source: [email protected]
https://cert-portal.siemens.com/productcert/html/ssa-322980.html
Vendor Advisory
Source: [email protected]
https://cert-portal.siemens.com/productcert/pdf/ssa-322980.pdf

CVSS

7.5HIGHsiemens
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-476

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card