Vulnerability details
CVE-2024-52504
Official description
A vulnerability has been identified in SIPROTEC 4 6MD61 (All versions), SIPROTEC 4 6MD63 (All versions), SIPROTEC 4 6MD66 (All versions), SIPROTEC 4 6MD665 (All versions), SIPROTEC 4 7SA522 (All versions), SIPROTEC 4 7SA6 (All versions < V4.78), SIPROTEC 4 7SD5 (All versions < V4.78), SIPROTEC 4 7SD610 (All versions < V4.78), SIPROTEC 4 7SJ61 (All versions), SIPROTEC 4 7SJ62 (All versions), SIPROTEC 4 7SJ63 (All versions), SIPROTEC 4 7SJ64 (All versions), SIPROTEC 4 7SJ66 (All versions), SIPROTEC 4 7SS52 (All versions), SIPROTEC 4 7ST6 (All versions), SIPROTEC 4 7UM61 (All versions), SIPROTEC 4 7UM62 (All versions), SIPROTEC 4 7UT612 (All versions), SIPROTEC 4 7UT613 (All versions), SIPROTEC 4 7UT63 (All versions), SIPROTEC 4 7VE6 (All versions), SIPROTEC 4 7VK61 (All versions), SIPROTEC 4 7VU683 (All versions), SIPROTEC 4 Compact 7RW80 (All versions), SIPROTEC 4 Compact 7SD80 (All versions), SIPROTEC 4 Compact 7SJ80 (All versions), SIPROTEC 4 Compact 7SJ81 (All versions), SIPROTEC 4 Compact 7SK80 (All versions), SIPROTEC 4 Compact 7SK81 (All versions). Affected devices do not properly handle interrupted operations of file transfer. This could allow an unauthenticated remote attacker to cause a denial of service condition. To restore normal operations, the devices need to be restarted.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 8.7High | 4.0 | CVEProject cvelistV5 (CNA) (siemens) | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N |
| 7.5High | 3.1 | CVEProject cvelistV5 (CNA) (siemens) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| Siemens | SIPROTEC 4 6MD61 | All | CVEProject cvelistV5 (CNA) |
| Siemens | SIPROTEC 4 6MD63 | All | CVEProject cvelistV5 (CNA) |
| Siemens | SIPROTEC 4 6MD66 | All | CVEProject cvelistV5 (CNA) |
| Siemens | SIPROTEC 4 6MD665 | All | CVEProject cvelistV5 (CNA) |
| Siemens | SIPROTEC 4 7SA522 | All | CVEProject cvelistV5 (CNA) |
| Siemens | SIPROTEC 4 7SA6 | v < V4.78 | CVEProject cvelistV5 (CNA) |
| Siemens | SIPROTEC 4 7SD5 | v < V4.78 | CVEProject cvelistV5 (CNA) |
| Siemens | SIPROTEC 4 7SD610 | v < V4.78 | CVEProject cvelistV5 (CNA) |
| Siemens | SIPROTEC 4 7SJ61 | All | CVEProject cvelistV5 (CNA) |
| Siemens | SIPROTEC 4 7SJ62 | All | CVEProject cvelistV5 (CNA) |
| Siemens | SIPROTEC 4 7SJ63 | All | CVEProject cvelistV5 (CNA) |
| Siemens | SIPROTEC 4 7SJ64 | All | CVEProject cvelistV5 (CNA) |
| Siemens | SIPROTEC 4 7SJ66 | All | CVEProject cvelistV5 (CNA) |
| Siemens | SIPROTEC 4 7SS52 | All | CVEProject cvelistV5 (CNA) |
| Siemens | SIPROTEC 4 7ST6 | All | CVEProject cvelistV5 (CNA) |
| Siemens | SIPROTEC 4 7UM61 | All | CVEProject cvelistV5 (CNA) |
| Siemens | SIPROTEC 4 7UM62 | All | CVEProject cvelistV5 (CNA) |
| Siemens | SIPROTEC 4 7UT612 | All | CVEProject cvelistV5 (CNA) |
| Siemens | SIPROTEC 4 7UT613 | All | CVEProject cvelistV5 (CNA) |
| Siemens | SIPROTEC 4 7UT63 | All | CVEProject cvelistV5 (CNA) |
| Siemens | SIPROTEC 4 7VE6 | All | CVEProject cvelistV5 (CNA) |
| Siemens | SIPROTEC 4 7VK61 | All | CVEProject cvelistV5 (CNA) |
| Siemens | SIPROTEC 4 7VU683 | All | CVEProject cvelistV5 (CNA) |
| Siemens | SIPROTEC 4 Compact 7RW80 | All | CVEProject cvelistV5 (CNA) |
| Siemens | SIPROTEC 4 Compact 7SD80 | All | CVEProject cvelistV5 (CNA) |
| Siemens | SIPROTEC 4 Compact 7SJ80 | All | CVEProject cvelistV5 (CNA) |
| Siemens | SIPROTEC 4 Compact 7SJ81 | All | CVEProject cvelistV5 (CNA) |
| Siemens | SIPROTEC 4 Compact 7SK80 | All | CVEProject cvelistV5 (CNA) |
| Siemens | SIPROTEC 4 Compact 7SK81 | All | CVEProject cvelistV5 (CNA) |
References and advisories
1Details
- Published
- 2025-08-12
- Last updated
- 2025-08-12
- State
- Published
- Assigner (CNA)
- siemens
Exploit prediction (EPSS)
SSVC assessment (CISA)
- Automatable
- Yes
- Exploitation
- None
- Technical impact
- Partial
Weaknesses (CWE)
- CWE-754Improper Check for Unusual or Exceptional Conditions