Read the docs
TI-2024-35175 Aliases CVE-2024-52504GHSA-q8f8-8vf2-w978

Improper check for unusual conditions in Siemens SIPROTEC 4 6MD61

Priority MEDIUM 44CWE-754Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
—
Confidentiality · integrity · availability
None · None · High
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA.

Summary

A vulnerability has been identified in SIPROTEC 4 6MD61 (All versions), SIPROTEC 4 6MD63 (All versions), SIPROTEC 4 6MD66 (All versions), SIPROTEC 4 6MD665 (All versions), SIPROTEC 4 7SA522 (All versions), SIPROTEC 4 7SA6 (All versions < V4.78), SIPROTEC 4 7SD5 (All versions < V4.78), SIPROTEC 4 7SD610 (All versions < V4.78), SIPROTEC 4 7SJ61 (All versions), SIPROTEC 4 7SJ62 (All versions), SIPROTEC 4 7SJ63 (All versions), SIPROTEC 4 7SJ64 (All versions), SIPROTEC 4 7SJ66 (All versions), SIPROTEC 4 7SS52 (All versions), SIPROTEC 4 7ST6 (All versions), SIPROTEC 4 7UM61 (All versions), SIPROTEC 4 7UM62 (All versions), SIPROTEC 4 7UT612 (All versions), SIPROTEC 4 7UT613 (All versions), SIPROTEC 4 7UT63 (All versions), SIPROTEC 4 7VE6 (All versions), SIPROTEC 4 7VK61 (All versions), SIPROTEC 4 7VU683 (All versions), SIPROTEC 4 Compact 7RW80 (All versions), SIPROTEC 4 Compact 7SD80 (All versions), SIPROTEC 4 Compact 7SJ80 (All versions), SIPROTEC 4 Compact 7SJ81 (All versions), SIPROTEC 4 Compact 7SK80 (All versions), SIPROTEC 4 Compact 7SK81 (All versions). Affected devices do not properly handle interrupted operations of file transfer. This could allow an unauthenticated remote attacker to cause a denial of service condition. To restore normal operations, the devices need to be restarted.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00482 41st percentileScored 2026-11-07
Fix Fixed SIPROTEC 4 7SA6 (Siemens): V4.78SIPROTEC 4 7SD5 (Siemens): V4.78+1 more product

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
SiemensSIPROTEC 4 6MD61all versions—No fix listedCNA
SiemensSIPROTEC 4 6MD63all versions—No fix listedCNA
SiemensSIPROTEC 4 6MD66all versions—No fix listedCNA
SiemensSIPROTEC 4 6MD665all versions—No fix listedCNA
SiemensSIPROTEC 4 7SA522all versions—No fix listedCNA
SiemensSIPROTEC 4 7SA6before V4.78V4.78Patch availableCNA
SiemensSIPROTEC 4 7SD5before V4.78V4.78Patch availableCNA
SiemensSIPROTEC 4 7SD610before V4.78V4.78Patch availableCNA
SiemensSIPROTEC 4 7SJ61all versions—No fix listedCNA
SiemensSIPROTEC 4 7SJ62all versions—No fix listedCNA
SiemensSIPROTEC 4 7SJ63all versions—No fix listedCNA
SiemensSIPROTEC 4 7SJ64all versions—No fix listedCNA
SiemensSIPROTEC 4 7SJ66all versions—No fix listedCNA
SiemensSIPROTEC 4 7SS52all versions—No fix listedCNA
SiemensSIPROTEC 4 7ST6all versions—No fix listedCNA
SiemensSIPROTEC 4 7UM61all versions—No fix listedCNA
SiemensSIPROTEC 4 7UM62all versions—No fix listedCNA
SiemensSIPROTEC 4 7UT612all versions—No fix listedCNA
SiemensSIPROTEC 4 7UT613all versions—No fix listedCNA
SiemensSIPROTEC 4 7UT63all versions—No fix listedCNA
SiemensSIPROTEC 4 7VE6all versions—No fix listedCNA
SiemensSIPROTEC 4 7VK61all versions—No fix listedCNA
SiemensSIPROTEC 4 7VU683all versions—No fix listedCNA
SiemensSIPROTEC 4 Compact 7RW80all versions—No fix listedCNA
SiemensSIPROTEC 4 Compact 7SD80all versions—No fix listedCNA
SiemensSIPROTEC 4 Compact 7SJ80all versions—No fix listedCNA
SiemensSIPROTEC 4 Compact 7SJ81all versions—No fix listedCNA
SiemensSIPROTEC 4 Compact 7SK80all versions—No fix listedCNA
SiemensSIPROTEC 4 Compact 7SK81all versions—No fix listedCNA
  • SIPROTEC 4 6MD61 VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SIPROTEC 4 6MD63 VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SIPROTEC 4 6MD66 VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SIPROTEC 4 6MD665 VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SIPROTEC 4 7SA522 VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SIPROTEC 4 7SA6 VendorSiemens Affected before V4.78 Fixed in V4.78 Patch available CNA
  • SIPROTEC 4 7SD5 VendorSiemens Affected before V4.78 Fixed in V4.78 Patch available CNA
  • SIPROTEC 4 7SD610 VendorSiemens Affected before V4.78 Fixed in V4.78 Patch available CNA
  • SIPROTEC 4 7SJ61 VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SIPROTEC 4 7SJ62 VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SIPROTEC 4 7SJ63 VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SIPROTEC 4 7SJ64 VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SIPROTEC 4 7SJ66 VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SIPROTEC 4 7SS52 VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SIPROTEC 4 7ST6 VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SIPROTEC 4 7UM61 VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SIPROTEC 4 7UM62 VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SIPROTEC 4 7UT612 VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SIPROTEC 4 7UT613 VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SIPROTEC 4 7UT63 VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SIPROTEC 4 7VE6 VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SIPROTEC 4 7VK61 VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SIPROTEC 4 7VU683 VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SIPROTEC 4 Compact 7RW80 VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SIPROTEC 4 Compact 7SD80 VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SIPROTEC 4 Compact 7SJ80 VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SIPROTEC 4 Compact 7SJ81 VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SIPROTEC 4 Compact 7SK80 VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • SIPROTEC 4 Compact 7SK81 VendorSiemens Affected all versions Fixed in — No fix listed CNA

Remediation

  • Fix · CNA SIPROTEC 4 7SA6 (Siemens) Fixed in V4.78
  • Fix · CNA SIPROTEC 4 7SD5 (Siemens) Fixed in V4.78
  • Fix · CNA SIPROTEC 4 7SD610 (Siemens) Fixed in V4.78

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-52504
  2. 2026-10-03 Alias added: GHSA-q8f8-8vf2-w978

References

Other 1

  • TI-2026-20057 Authentication bypass in Fortinet FortiWeb KEVCVSS 3.1CRITICAL 9.4
  • TI-2025-26358 tls: fix handling of zero-length records on the rx_list KEVCVSS 3.1CRITICAL 9.8
  • TI-2025-18911 Heap-based buffer overflow in Fortinet FortiSwitchManager KEVCVSS 3.1CRITICAL 9.8
  • TI-2025-09686 Type confusion in Google Chrome KEVCVSS 3.1CRITICAL 9.8
  • TI-2022-07142 Code injection in Spring Framework KEVCVSS 3.1CRITICAL 9.8
  • TI-2021-19919 Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints KEVCVSS 3.1CRITICAL 10.0
See all 2487 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences