CVE-2024-52504 PUBLISHED

Assigner: siemens
Reserved: 11.11.2024 Published: 12.08.2025 Updated: 12.08.2025

A vulnerability has been identified in SIPROTEC 4 6MD61 (All versions), SIPROTEC 4 6MD63 (All versions), SIPROTEC 4 6MD66 (All versions), SIPROTEC 4 6MD665 (All versions), SIPROTEC 4 7SA522 (All versions), SIPROTEC 4 7SA6 (All versions < V4.78), SIPROTEC 4 7SD5 (All versions < V4.78), SIPROTEC 4 7SD610 (All versions < V4.78), SIPROTEC 4 7SJ61 (All versions), SIPROTEC 4 7SJ62 (All versions), SIPROTEC 4 7SJ63 (All versions), SIPROTEC 4 7SJ64 (All versions), SIPROTEC 4 7SJ66 (All versions), SIPROTEC 4 7SS52 (All versions), SIPROTEC 4 7ST6 (All versions), SIPROTEC 4 7UM61 (All versions), SIPROTEC 4 7UM62 (All versions), SIPROTEC 4 7UT612 (All versions), SIPROTEC 4 7UT613 (All versions), SIPROTEC 4 7UT63 (All versions), SIPROTEC 4 7VE6 (All versions), SIPROTEC 4 7VK61 (All versions), SIPROTEC 4 7VU683 (All versions), SIPROTEC 4 Compact 7RW80 (All versions), SIPROTEC 4 Compact 7SD80 (All versions), SIPROTEC 4 Compact 7SJ80 (All versions), SIPROTEC 4 Compact 7SJ81 (All versions), SIPROTEC 4 Compact 7SK80 (All versions), SIPROTEC 4 Compact 7SK81 (All versions). Affected devices do not properly handle interrupted operations of file transfer. This could allow an unauthenticated remote attacker to cause a denial of service condition. To restore normal operations, the devices need to be restarted.

Metrics

CVSS 3.1
CVSS 4.0

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS Score: 7.5

Attack Vector	Network	Scope	Unchanged
Attack Complexity	Low	Confidentiality Impact	None
Privileges Required	None	Integrity Impact	None
User Interaction	None	Availability Impact	High

CVSS 3.1

CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
CVSS Score: 8.7

Exploitability Metrics		Vulnerable System Impact Metrics		Subsequent System Impact Metrics
Attack Vector	Network	Confidentiality	None	Confidentiality	None
Attack Complexity	Low	Integrity	None	Integrity	None
Attack Requirements	None	Availability	High	Availability	None
Privileges Required	None
User Interaction	None

CVSS 4.0

Product Status

Vendor	Siemens
Product	SIPROTEC 4 6MD61
Versions	Default: unknown affected from 0 to * (excl.)

Vendor	Siemens
Product	SIPROTEC 4 6MD63
Versions	Default: unknown affected from 0 to * (excl.)

Vendor	Siemens
Product	SIPROTEC 4 6MD66
Versions	Default: unknown affected from 0 to * (excl.)

Vendor	Siemens
Product	SIPROTEC 4 6MD665
Versions	Default: unknown affected from 0 to * (excl.)

Vendor	Siemens
Product	SIPROTEC 4 7SA522
Versions	Default: unknown affected from 0 to * (excl.)

Vendor	Siemens
Product	SIPROTEC 4 7SA6
Versions	Default: unknown affected from 0 to V4.78 (excl.)

Vendor	Siemens
Product	SIPROTEC 4 7SD5
Versions	Default: unknown affected from 0 to V4.78 (excl.)

Vendor	Siemens
Product	SIPROTEC 4 7SD610
Versions	Default: unknown affected from 0 to V4.78 (excl.)

Vendor	Siemens
Product	SIPROTEC 4 7SJ61
Versions	Default: unknown affected from 0 to * (excl.)

Vendor	Siemens
Product	SIPROTEC 4 7SJ62
Versions	Default: unknown affected from 0 to * (excl.)

Vendor	Siemens
Product	SIPROTEC 4 7SJ63
Versions	Default: unknown affected from 0 to * (excl.)

Vendor	Siemens
Product	SIPROTEC 4 7SJ64
Versions	Default: unknown affected from 0 to * (excl.)

Vendor	Siemens
Product	SIPROTEC 4 7SJ66
Versions	Default: unknown affected from 0 to * (excl.)

Vendor	Siemens
Product	SIPROTEC 4 7SS52
Versions	Default: unknown affected from 0 to * (excl.)

Vendor	Siemens
Product	SIPROTEC 4 7ST6
Versions	Default: unknown affected from 0 to * (excl.)

Vendor	Siemens
Product	SIPROTEC 4 7UM61
Versions	Default: unknown affected from 0 to * (excl.)

Vendor	Siemens
Product	SIPROTEC 4 7UM62
Versions	Default: unknown affected from 0 to * (excl.)

Vendor	Siemens
Product	SIPROTEC 4 7UT612
Versions	Default: unknown affected from 0 to * (excl.)

Vendor	Siemens
Product	SIPROTEC 4 7UT613
Versions	Default: unknown affected from 0 to * (excl.)

Vendor	Siemens
Product	SIPROTEC 4 7UT63
Versions	Default: unknown affected from 0 to * (excl.)

Vendor	Siemens
Product	SIPROTEC 4 7VE6
Versions	Default: unknown affected from 0 to * (excl.)

Vendor	Siemens
Product	SIPROTEC 4 7VK61
Versions	Default: unknown affected from 0 to * (excl.)

Vendor	Siemens
Product	SIPROTEC 4 7VU683
Versions	Default: unknown affected from 0 to * (excl.)

Vendor	Siemens
Product	SIPROTEC 4 Compact 7RW80
Versions	Default: unknown affected from 0 to * (excl.)

Vendor	Siemens
Product	SIPROTEC 4 Compact 7SD80
Versions	Default: unknown affected from 0 to * (excl.)

Vendor	Siemens
Product	SIPROTEC 4 Compact 7SJ80
Versions	Default: unknown affected from 0 to * (excl.)

Vendor	Siemens
Product	SIPROTEC 4 Compact 7SJ81
Versions	Default: unknown affected from 0 to * (excl.)

Vendor	Siemens
Product	SIPROTEC 4 Compact 7SK80
Versions	Default: unknown affected from 0 to * (excl.)

Vendor	Siemens
Product	SIPROTEC 4 Compact 7SK81
Versions	Default: unknown affected from 0 to * (excl.)

References

https://cert-portal.siemens.com/productcert/html/ssa-400089.html

Problem Types

CWE-754: Improper Check for Unusual or Exceptional Conditions CWE