جزئیات آسیبپذیری
CVE-2024-52504
شرح رسمی (انگلیسی)
A vulnerability has been identified in SIPROTEC 4 6MD61 (All versions), SIPROTEC 4 6MD63 (All versions), SIPROTEC 4 6MD66 (All versions), SIPROTEC 4 6MD665 (All versions), SIPROTEC 4 7SA522 (All versions), SIPROTEC 4 7SA6 (All versions < V4.78), SIPROTEC 4 7SD5 (All versions < V4.78), SIPROTEC 4 7SD610 (All versions < V4.78), SIPROTEC 4 7SJ61 (All versions), SIPROTEC 4 7SJ62 (All versions), SIPROTEC 4 7SJ63 (All versions), SIPROTEC 4 7SJ64 (All versions), SIPROTEC 4 7SJ66 (All versions), SIPROTEC 4 7SS52 (All versions), SIPROTEC 4 7ST6 (All versions), SIPROTEC 4 7UM61 (All versions), SIPROTEC 4 7UM62 (All versions), SIPROTEC 4 7UT612 (All versions), SIPROTEC 4 7UT613 (All versions), SIPROTEC 4 7UT63 (All versions), SIPROTEC 4 7VE6 (All versions), SIPROTEC 4 7VK61 (All versions), SIPROTEC 4 7VU683 (All versions), SIPROTEC 4 Compact 7RW80 (All versions), SIPROTEC 4 Compact 7SD80 (All versions), SIPROTEC 4 Compact 7SJ80 (All versions), SIPROTEC 4 Compact 7SJ81 (All versions), SIPROTEC 4 Compact 7SK80 (All versions), SIPROTEC 4 Compact 7SK81 (All versions). Affected devices do not properly handle interrupted operations of file transfer. This could allow an unauthenticated remote attacker to cause a denial of service condition. To restore normal operations, the devices need to be restarted.
امتیازهای CVSS
| امتیاز | نسخه | منبع | بردار |
|---|---|---|---|
| 8.7بالا | 4.0 | CVEProject cvelistV5 (CNA) (siemens) | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N |
| 7.5بالا | 3.1 | CVEProject cvelistV5 (CNA) (siemens) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
محصولات آسیبپذیر
| فروشنده | محصول | نسخهها | منبع |
|---|---|---|---|
| Siemens | SIPROTEC 4 6MD61 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIPROTEC 4 6MD63 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIPROTEC 4 6MD66 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIPROTEC 4 6MD665 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIPROTEC 4 7SA522 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIPROTEC 4 7SA6 | v < V4.78 | CVEProject cvelistV5 (CNA) |
| Siemens | SIPROTEC 4 7SD5 | v < V4.78 | CVEProject cvelistV5 (CNA) |
| Siemens | SIPROTEC 4 7SD610 | v < V4.78 | CVEProject cvelistV5 (CNA) |
| Siemens | SIPROTEC 4 7SJ61 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIPROTEC 4 7SJ62 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIPROTEC 4 7SJ63 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIPROTEC 4 7SJ64 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIPROTEC 4 7SJ66 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIPROTEC 4 7SS52 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIPROTEC 4 7ST6 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIPROTEC 4 7UM61 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIPROTEC 4 7UM62 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIPROTEC 4 7UT612 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIPROTEC 4 7UT613 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIPROTEC 4 7UT63 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIPROTEC 4 7VE6 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIPROTEC 4 7VK61 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIPROTEC 4 7VU683 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIPROTEC 4 Compact 7RW80 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIPROTEC 4 Compact 7SD80 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIPROTEC 4 Compact 7SJ80 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIPROTEC 4 Compact 7SJ81 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIPROTEC 4 Compact 7SK80 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIPROTEC 4 Compact 7SK81 | همه | CVEProject cvelistV5 (CNA) |
منابع و راهنماها
۱اطلاعات
- تاریخ انتشار
- ۱۴۰۴/۰۵/۲۱
- آخرین بهروزرسانی
- ۱۴۰۴/۰۵/۲۱
- وضعیت
- منتشرشده
- صادرکننده (CNA)
- siemens
پیشبینی بهرهبرداری (EPSS)
ارزیابی SSVC (CISA)
- قابل خودکارسازی
- بله
- وضعیت بهرهبرداری
- ندارد
- اثر فنی
- جزئی
ضعفها (CWE)
- CWE-754Improper Check for Unusual or Exceptional Conditions