Unrestricted file upload in Siemens All other SIPROTEC 5 device types with CPU variants…
Priority LOW 36CWE-552Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Information disclosure, Code execution
- Confidentiality · integrity · availability
- None · High · None
- Fix status
- Fixed
Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-552 and CWE-434.
Summary
A vulnerability has been identified in All other SIPROTEC 5 device types with CPU variants CP300 and CP100 and the respective Ethernet communication modules (All versions ), DIGSI 5 engineering software (All versions < V7.90), SIPROTEC 5 device types 6MD85, 6MD86, 6MD89, 7UM85, 7SA87, 7SD87, 7SL87, 7VK87, 7SA82, 7SA86, 7SD82, 7SD86, 7SL82, 7SL86, 7SJ86, 7SK82, 7SK85, 7SJ82, 7SJ85, 7UT82, 7UT85, 7UT86, 7UT87 and 7VE85 with CPU variants CP300 and CP100 and the respective Ethernet communication modules (All versions < V7.90), SIPROTEC 5 device types 7SS85 and 7KE85 (All versions < V8.01), SIPROTEC 5 device types with CPU variants CP200 and the respective Ethernet communication modules (All versions). A remote attacker could use specially crafted packets sent to port 443/TCP to upload, download or delete files in certain parts of the file system.
Why it matters now
EPSS 0.01763 78th percentileScored 2026-11-07
Fix Fixed DIGSI 5 engineering software (Siemens AG): V7.90SIPROTEC 5 device types 6MD85, 6MD86, 6MD89, 7UM85, 7SA87, 7SD87, 7SL87, 7VK87, 7SA82, 7SA86, 7SD82, 7SD86, 7SL82, 7SL86, 7SJ86, 7SK82, 7SK85, 7SJ82, 7SJ85, 7UT82, 7UT85, 7UT86, 7UT87 and 7VE85 with CPU variants CP300 and CP100 and the respective Ethernet communication modules (Siemens AG): V7.90+1 more product
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Siemens | All other SIPROTEC 5 device types with CPU variants CP300 and CP100 and the respective Ethernet communication modules | All versions | — | No fix listed | CNA |
| Siemens | DIGSI 5 engineering software | before V7.90 | V7.90 | Patch available | CNA |
| Siemens | SIPROTEC 5 device types 6MD85, 6MD86, 6MD89, 7UM85, 7SA87, 7SD87, 7SL87, 7VK87, 7SA82, 7SA86, 7SD82, 7SD86, 7SL82, 7SL86, 7SJ86, 7SK82, 7SK85, 7SJ82, 7SJ85, 7UT82, 7UT85, 7UT86, 7UT87 and 7VE85 with CPU variants CP300 and CP100 and the respective Ethernet communication modules | before V7.90 | V7.90 | Patch available | CNA |
| Siemens | SIPROTEC 5 device types 7SS85 and 7KE85 | before V8.01 | V8.01 | Patch available | CNA |
| Siemens | SIPROTEC 5 device types with CPU variants CP200 and the respective Ethernet communication modules | All versions | — | No fix listed | CNA |
- All other SIPROTEC 5 device types with CPU variants CP300 and CP100 and the respective Ethernet communication modules VendorSiemens Affected All versions Fixed in — No fix listed CNA
- DIGSI 5 engineering software VendorSiemens Affected before V7.90 Fixed in V7.90 Patch available CNA
- SIPROTEC 5 device types 6MD85, 6MD86, 6MD89, 7UM85, 7SA87, 7SD87, 7SL87, 7VK87, 7SA82, 7SA86, 7SD82, 7SD86, 7SL82, 7SL86, 7SJ86, 7SK82, 7SK85, 7SJ82, 7SJ85, 7UT82, 7UT85, 7UT86, 7UT87 and 7VE85 with CPU variants CP300 and CP100 and the respective Ethernet communication modules VendorSiemens Affected before V7.90 Fixed in V7.90 Patch available CNA
- SIPROTEC 5 device types 7SS85 and 7KE85 VendorSiemens Affected before V8.01 Fixed in V8.01 Patch available CNA
- SIPROTEC 5 device types with CPU variants CP200 and the respective Ethernet communication modules VendorSiemens Affected All versions Fixed in — No fix listed CNA
CPE configurations NVD · 26
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:siemens:digsi_5_engineering_software:7.90:*:*:*:*:*:*:* | 7.90 | Vulnerable | Siemens |
| cpe:2.3:a:siemens:siprotec_5_digsi_device_driver:7.90:*:*:*:*:*:*:* | 7.90 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:6md85:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:h:siemens:6md86:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:h:siemens:6md89:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:h:siemens:7sa82:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:h:siemens:7sa86:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:h:siemens:7sa87:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:h:siemens:7sd82:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:h:siemens:7sd86:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
- cpe:2.3:a:siemens:digsi_5_engineering_software:7.90:*:*:*:*:*:*:* Versions 7.90 Vulnerable ·Siemens
- cpe:2.3:a:siemens:siprotec_5_digsi_device_driver:7.90:*:*:*:*:*:*:* Versions 7.90 Vulnerable ·Siemens
- cpe:2.3:h:siemens:6md85:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:h:siemens:6md86:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:h:siemens:6md89:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:h:siemens:7sa82:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:h:siemens:7sa86:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:h:siemens:7sa87:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:h:siemens:7sd82:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:h:siemens:7sd86:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
Show 16 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:h:siemens:7sd87:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:h:siemens:7sj82:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:h:siemens:7sj85:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:h:siemens:7sj86:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:h:siemens:7sk82:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:h:siemens:7sk85:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:h:siemens:7sl82:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:h:siemens:7sl86:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:h:siemens:7sl87:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:h:siemens:7um85:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:h:siemens:7ut82:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:h:siemens:7ut85:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:h:siemens:7ut86:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:h:siemens:7ut87:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:h:siemens:7ve85:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:h:siemens:7vk87:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
- cpe:2.3:h:siemens:7sd87:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:h:siemens:7sj82:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:h:siemens:7sj85:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:h:siemens:7sj86:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:h:siemens:7sk82:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:h:siemens:7sk85:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:h:siemens:7sl82:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:h:siemens:7sl86:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:h:siemens:7sl87:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:h:siemens:7um85:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:h:siemens:7ut82:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:h:siemens:7ut85:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:h:siemens:7ut86:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:h:siemens:7ut87:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:h:siemens:7ve85:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:h:siemens:7vk87:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
Remediation
- Fix · CNA DIGSI 5 engineering software (Siemens AG) Fixed in V7.90
- Fix · CNA SIPROTEC 5 device types 6MD85, 6MD86, 6MD89, 7UM85, 7SA87, 7SD87, 7SL87, 7VK87, 7SA82, 7SA86, 7SD82, 7SD86, 7SL82, 7SL86, 7SJ86, 7SK82, 7SK85, 7SJ82, 7SJ85, 7UT82, 7UT85, 7UT86, 7UT87 and 7VE85 with CPU variants CP300 and CP100 and the respective Ethernet communication modules (Siemens AG) Fixed in V7.90
- Fix · CNA SIPROTEC 5 device types 7SS85 and 7KE85 (Siemens AG) Fixed in V8.01
Timeline
- 2026-10-02 Threatist record created from CVE-2019-10930
- 2026-10-03 Alias added: GHSA-47fm-3fq2-mf5q
References
More Siemens Digsi 5 Engineering Software vulnerabilities
- TI-2019-08152 A vulnerability has been identified in All other SIPROTEC 5 device types with CPU… CVSS 3.1HIGH 7.5
Sources
- CVE-2019-10930 · CVE Program
- CVE-2019-10930 · NVD
- FIRST EPSS
- GHSA-47fm-3fq2-mf5q · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences