A vulnerability has been identified in All other SIPROTEC 5 device types with CPU…
Priority LOW 36CWE-248Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Denial of service
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-248.
Summary
A vulnerability has been identified in All other SIPROTEC 5 device types with CPU variants CP300 and CP100 and the respective Ethernet communication modules (All versions ), DIGSI 5 engineering software (All versions < V7.90), SIPROTEC 5 device types 6MD85, 6MD86, 6MD89, 7UM85, 7SA87, 7SD87, 7SL87, 7VK87, 7SA82, 7SA86, 7SD82, 7SD86, 7SL82, 7SL86, 7SJ86, 7SK82, 7SK85, 7SJ82, 7SJ85, 7UT82, 7UT85, 7UT86, 7UT87 and 7VE85 with CPU variants CP300 and CP100 and the respective Ethernet communication modules (All versions < V7.90), SIPROTEC 5 device types 7SS85 and 7KE85 (All versions < V8.01), SIPROTEC 5 device types with CPU variants CP200 and the respective Ethernet communication modules (All versions < V7.59), SIPROTEC 5 relays with CPU variants CP200 and the respective Ethernet communication modules (All versions < V7.59). Specially crafted packets sent to port 443/TCP could cause a Denial of Service condition.
Why it matters now
EPSS 0.01518 74th percentileScored 2026-11-07
Fix Fixed DIGSI 5 engineering software (Siemens AG): V7.90SIPROTEC 5 device types 6MD85, 6MD86, 6MD89, 7UM85, 7SA87, 7SD87, 7SL87, 7VK87, 7SA82, 7SA86, 7SD82, 7SD86, 7SL82, 7SL86, 7SJ86, 7SK82, 7SK85, 7SJ82, 7SJ85, 7UT82, 7UT85, 7UT86, 7UT87 and 7VE85 with CPU variants CP300 and CP100 and the respective Ethernet communication modules (Siemens AG): V7.90+3 more products
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Siemens | All other SIPROTEC 5 device types with CPU variants CP300 and CP100 and the respective Ethernet communication modules | All versions | — | No fix listed | CNA |
| Siemens | DIGSI 5 engineering software | before V7.90 | V7.90 | Patch available | CNA |
| Siemens | SIPROTEC 5 device types 6MD85, 6MD86, 6MD89, 7UM85, 7SA87, 7SD87, 7SL87, 7VK87, 7SA82, 7SA86, 7SD82, 7SD86, 7SL82, 7SL86, 7SJ86, 7SK82, 7SK85, 7SJ82, 7SJ85, 7UT82, 7UT85, 7UT86, 7UT87 and 7VE85 with CPU variants CP300 and CP100 and the respective Ethernet communication modules | before V7.90 | V7.90 | Patch available | CNA |
| Siemens | SIPROTEC 5 device types 7SS85 and 7KE85 | before V8.01 | V8.01 | Patch available | CNA |
| Siemens | SIPROTEC 5 device types with CPU variants CP200 and the respective Ethernet communication modules | before V7.59 | V7.59 | Patch available | CNA |
| Siemens | SIPROTEC 5 relays with CPU variants CP200 and the respective Ethernet communication modules | before V7.59 | V7.59 | Patch available | CNA |
- All other SIPROTEC 5 device types with CPU variants CP300 and CP100 and the respective Ethernet communication modules VendorSiemens Affected All versions Fixed in — No fix listed CNA
- DIGSI 5 engineering software VendorSiemens Affected before V7.90 Fixed in V7.90 Patch available CNA
- SIPROTEC 5 device types 6MD85, 6MD86, 6MD89, 7UM85, 7SA87, 7SD87, 7SL87, 7VK87, 7SA82, 7SA86, 7SD82, 7SD86, 7SL82, 7SL86, 7SJ86, 7SK82, 7SK85, 7SJ82, 7SJ85, 7UT82, 7UT85, 7UT86, 7UT87 and 7VE85 with CPU variants CP300 and CP100 and the respective Ethernet communication modules VendorSiemens Affected before V7.90 Fixed in V7.90 Patch available CNA
- SIPROTEC 5 device types 7SS85 and 7KE85 VendorSiemens Affected before V8.01 Fixed in V8.01 Patch available CNA
- SIPROTEC 5 device types with CPU variants CP200 and the respective Ethernet communication modules VendorSiemens Affected before V7.59 Fixed in V7.59 Patch available CNA
- SIPROTEC 5 relays with CPU variants CP200 and the respective Ethernet communication modules VendorSiemens Affected before V7.59 Fixed in V7.59 Patch available CNA
CPE configurations NVD · 29
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:siemens:siprotec_5_digsi_device_driver:*:*:*:*:*:*:*:* | before 7.90 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:6md85:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:h:siemens:6md86:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:h:siemens:6md89:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:h:siemens:7sa82:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:h:siemens:7sa86:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:h:siemens:7sa87:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:h:siemens:7sd82:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:h:siemens:7sd86:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:h:siemens:7sd87:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
- cpe:2.3:a:siemens:siprotec_5_digsi_device_driver:*:*:*:*:*:*:*:* Versions before 7.90 Vulnerable ·Siemens
- cpe:2.3:h:siemens:6md85:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:h:siemens:6md86:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:h:siemens:6md89:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:h:siemens:7sa82:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:h:siemens:7sa86:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:h:siemens:7sa87:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:h:siemens:7sd82:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:h:siemens:7sd86:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:h:siemens:7sd87:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
Show 19 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:h:siemens:7sj82:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:h:siemens:7sj85:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:h:siemens:7sj86:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:h:siemens:7sk82:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:h:siemens:7sk85:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:h:siemens:7sl82:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:h:siemens:7sl86:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:h:siemens:7sl87:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:h:siemens:7um85:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:h:siemens:7ut82:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:h:siemens:7ut85:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:h:siemens:7ut86:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:h:siemens:7ut87:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:h:siemens:7ve85:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:h:siemens:7vk87:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:a:siemens:siprotec_5_digsi_device_driver:*:*:*:*:*:*:*:* | before 8.01 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:7ke85:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:h:siemens:7ss85:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:a:siemens:digsi_5_engineering_software:*:*:*:*:*:*:*:* | before 7.90 | Vulnerable | Siemens |
- cpe:2.3:h:siemens:7sj82:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:h:siemens:7sj85:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:h:siemens:7sj86:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:h:siemens:7sk82:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:h:siemens:7sk85:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:h:siemens:7sl82:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:h:siemens:7sl86:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:h:siemens:7sl87:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:h:siemens:7um85:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:h:siemens:7ut82:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:h:siemens:7ut85:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:h:siemens:7ut86:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:h:siemens:7ut87:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:h:siemens:7ve85:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:h:siemens:7vk87:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:a:siemens:siprotec_5_digsi_device_driver:*:*:*:*:*:*:*:* Versions before 8.01 Vulnerable ·Siemens
- cpe:2.3:h:siemens:7ke85:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:h:siemens:7ss85:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:a:siemens:digsi_5_engineering_software:*:*:*:*:*:*:*:* Versions before 7.90 Vulnerable ·Siemens
Remediation
- Fix · CNA DIGSI 5 engineering software (Siemens AG) Fixed in V7.90
- Fix · CNA SIPROTEC 5 device types 6MD85, 6MD86, 6MD89, 7UM85, 7SA87, 7SD87, 7SL87, 7VK87, 7SA82, 7SA86, 7SD82, 7SD86, 7SL82, 7SL86, 7SJ86, 7SK82, 7SK85, 7SJ82, 7SJ85, 7UT82, 7UT85, 7UT86, 7UT87 and 7VE85 with CPU variants CP300 and CP100 and the respective Ethernet communication modules (Siemens AG) Fixed in V7.90
- Fix · CNA SIPROTEC 5 device types 7SS85 and 7KE85 (Siemens AG) Fixed in V8.01
- Fix · CNA SIPROTEC 5 device types with CPU variants CP200 and the respective Ethernet communication modules (Siemens AG) Fixed in V7.59
- Fix · CNA SIPROTEC 5 relays with CPU variants CP200 and the respective Ethernet communication modules (Siemens AG) Fixed in V7.59
Timeline
- 2026-10-02 Threatist record created from CVE-2019-10931
- 2026-10-03 Alias added: GHSA-jm37-cfmc-68fh
References
More Siemens Digsi 5 Engineering Software vulnerabilities
- TI-2019-08151 Unrestricted file upload in Siemens All other SIPROTEC 5 device types with CPU variants… CVSS 3.0HIGH 7.5
Sources
- CVE-2019-10931 · CVE Program
- CVE-2019-10931 · NVD
- FIRST EPSS
- GHSA-jm37-cfmc-68fh · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences