Vulnerability details

CVE-2024-52504

Siemens SIPROTEC 4 6MD61Siemens SIPROTEC 4 6MD63Siemens SIPROTEC 4 6MD66Siemens SIPROTEC 4 6MD665Siemens SIPROTEC 4 7SA522Siemens SIPROTEC 4 7SA6
CVSS 4.0
8.7High

Official description

A vulnerability has been identified in SIPROTEC 4 6MD61 (All versions), SIPROTEC 4 6MD63 (All versions), SIPROTEC 4 6MD66 (All versions), SIPROTEC 4 6MD665 (All versions), SIPROTEC 4 7SA522 (All versions), SIPROTEC 4 7SA6 (All versions < V4.78), SIPROTEC 4 7SD5 (All versions < V4.78), SIPROTEC 4 7SD610 (All versions < V4.78), SIPROTEC 4 7SJ61 (All versions), SIPROTEC 4 7SJ62 (All versions), SIPROTEC 4 7SJ63 (All versions), SIPROTEC 4 7SJ64 (All versions), SIPROTEC 4 7SJ66 (All versions), SIPROTEC 4 7SS52 (All versions), SIPROTEC 4 7ST6 (All versions), SIPROTEC 4 7UM61 (All versions), SIPROTEC 4 7UM62 (All versions), SIPROTEC 4 7UT612 (All versions), SIPROTEC 4 7UT613 (All versions), SIPROTEC 4 7UT63 (All versions), SIPROTEC 4 7VE6 (All versions), SIPROTEC 4 7VK61 (All versions), SIPROTEC 4 7VU683 (All versions), SIPROTEC 4 Compact 7RW80 (All versions), SIPROTEC 4 Compact 7SD80 (All versions), SIPROTEC 4 Compact 7SJ80 (All versions), SIPROTEC 4 Compact 7SJ81 (All versions), SIPROTEC 4 Compact 7SK80 (All versions), SIPROTEC 4 Compact 7SK81 (All versions). Affected devices do not properly handle interrupted operations of file transfer. This could allow an unauthenticated remote attacker to cause a denial of service condition. To restore normal operations, the devices need to be restarted.

CVSS scores

ScoreVersionSourceVector
8.7High 4.0 CVEProject cvelistV5 (CNA) (siemens) CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
7.5High 3.1 CVEProject cvelistV5 (CNA) (siemens) CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

VendorProductVersionsSource
Siemens SIPROTEC 4 6MD61 All CVEProject cvelistV5 (CNA)
Siemens SIPROTEC 4 6MD63 All CVEProject cvelistV5 (CNA)
Siemens SIPROTEC 4 6MD66 All CVEProject cvelistV5 (CNA)
Siemens SIPROTEC 4 6MD665 All CVEProject cvelistV5 (CNA)
Siemens SIPROTEC 4 7SA522 All CVEProject cvelistV5 (CNA)
Siemens SIPROTEC 4 7SA6 v < V4.78 CVEProject cvelistV5 (CNA)
Siemens SIPROTEC 4 7SD5 v < V4.78 CVEProject cvelistV5 (CNA)
Siemens SIPROTEC 4 7SD610 v < V4.78 CVEProject cvelistV5 (CNA)
Siemens SIPROTEC 4 7SJ61 All CVEProject cvelistV5 (CNA)
Siemens SIPROTEC 4 7SJ62 All CVEProject cvelistV5 (CNA)
Siemens SIPROTEC 4 7SJ63 All CVEProject cvelistV5 (CNA)
Siemens SIPROTEC 4 7SJ64 All CVEProject cvelistV5 (CNA)
Siemens SIPROTEC 4 7SJ66 All CVEProject cvelistV5 (CNA)
Siemens SIPROTEC 4 7SS52 All CVEProject cvelistV5 (CNA)
Siemens SIPROTEC 4 7ST6 All CVEProject cvelistV5 (CNA)
Siemens SIPROTEC 4 7UM61 All CVEProject cvelistV5 (CNA)
Siemens SIPROTEC 4 7UM62 All CVEProject cvelistV5 (CNA)
Siemens SIPROTEC 4 7UT612 All CVEProject cvelistV5 (CNA)
Siemens SIPROTEC 4 7UT613 All CVEProject cvelistV5 (CNA)
Siemens SIPROTEC 4 7UT63 All CVEProject cvelistV5 (CNA)
Siemens SIPROTEC 4 7VE6 All CVEProject cvelistV5 (CNA)
Siemens SIPROTEC 4 7VK61 All CVEProject cvelistV5 (CNA)
Siemens SIPROTEC 4 7VU683 All CVEProject cvelistV5 (CNA)
Siemens SIPROTEC 4 Compact 7RW80 All CVEProject cvelistV5 (CNA)
Siemens SIPROTEC 4 Compact 7SD80 All CVEProject cvelistV5 (CNA)
Siemens SIPROTEC 4 Compact 7SJ80 All CVEProject cvelistV5 (CNA)
Siemens SIPROTEC 4 Compact 7SJ81 All CVEProject cvelistV5 (CNA)
Siemens SIPROTEC 4 Compact 7SK80 All CVEProject cvelistV5 (CNA)
Siemens SIPROTEC 4 Compact 7SK81 All CVEProject cvelistV5 (CNA)

References and advisories

1
Kolun on Telegram @kolunsec Exploited CVEs, key news and a daily digest Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.

Details

Published
2025-08-12
Last updated
2025-08-12
State
Published
Assigner (CNA)
siemens

Exploit prediction (EPSS)

0.48%
Probability of exploitation in 30 days
41.8%
Percentile (among all CVEs)

SSVC assessment (CISA)

Automatable
Yes
Exploitation
None
Technical impact
Partial

Weaknesses (CWE)

  • CWE-754
    Improper Check for Unusual or Exceptional Conditions