Republished vendor advisory. This CISA CSAF advisory was converted from Siemens ProductCERT's CSAF advisory.
General Recommendations: Operators of critical power systems (e.g. TSOs or DSOs) worldwide are usually required by regulations to build resilience into the power grids by applying multi-level redundant secondary protection schemes. It is therefore recommended that the operators check whether appropriate resilient protection measures are in place. The risk of cyber incidents impacting the grid's reliability can thus be minimized by virtue of the grid design. Siemens strongly recommends applying the provided security updates using the corresponding tooling and documented procedures made available with the product. If supported by the product, an automated means to apply the security updates across multiple product instances may be used. Siemens strongly recommends prior validation of any security update before being applied, and supervision by trained staff of the update process in the target environment. As a general security measure Siemens strongly recommends to protect network access with appropriate mechanisms (e.g. firewalls, segmentation, VPN). It is advised to configure the environment according to our operational guidelines in order to run the devices in a protected IT environment. Recommended security guidelines can be found at: https://www.siemens.com/gridsecurity
Additional Resources: For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories
Credit: Siemens ProductCERT
From CISA's machine-readable CSAF 2.0 advisory (JSON).
| CVE | Weakness | CVSS v3 | Details |
|---|---|---|---|
| CVE-2024-31484 | CWE-170 Improper Null Termination | 7.8 High |
CVE-2024-31484 The affected devices contain an improper null termination vulnerability while parsing a specific HTTP header. This could allow an attacker to execute code in the context of the current process or lead to denial of service condition. Vendor fix: Update to V5.30 or later version The firmware CPCI85 V5.30 is present within "CP-8031/CP-8050 Package" V5.30 Vendor fix: Update to V16.41 or later version. The firmware CPC80 V16.41 is present within “CP-8000/CP-8021/CP-8022 Package” V16.41 Affected, fixed & timelineAffected:
|
| CVE-2024-31485 | CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection') | 7.2 High |
CVE-2024-31485 The web interface of affected devices is vulnerable to command injection due to missing server side input sanitation. This could allow an authenticated privileged remote attacker to execute arbitrary code with root privileges. Vendor fix: Update to V5.30 or later version The firmware CPCI85 V5.30 is present within "CP-8031/CP-8050 Package" V5.30 Vendor fix: Update to V1.3.0 or later version The firmware SICORE V1.3.0 is present within "SICAM 8 Software Solution Package" V5.30 Affected, fixed & timelineAffected:
|
| CVE-2024-31486 | CWE-312 Cleartext Storage of Sensitive Information | 5.3 Medium |
CVE-2024-31486 The affected devices stores MQTT client passwords without sufficient protection on the devices. An attacker with remote shell access or physical access could retrieve the credentials leading to confidentiality loss. Vendor fix: Update to V5.30 or later version The firmware OPUPI0 V5.30 is present within "CP-8031/CP-8050 Package" V5.30 Affected, fixed & timelineAffected:
|
Scores and weakness types are as CISA or the republishing vendor stated them in this advisory; the linked CVE pages carry the independently enriched CVSS and SSVC assessments.
No coverage found in monitored research blogs or news feeds.
| CVE | CVSS | Affected |
|---|---|---|
| CVE-2024-31484 | 7.8 High | Siemens CPC80 Central Processing/Communication A vulnerability has been identified in CPC80 Central Processing/Communication (All versions < V16.41), CPCI85 Central Processing/Communication (All v… |
| CVE-2024-31485 | 7.2 High | Siemens CPCI85 Central Processing/Communication A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V5.30), SICORE Base system (All versions < V1.3.0). Th… |
| CVE-2024-31486 | 5.3 Medium | Siemens OPUPI0 AMQP/MQTT A vulnerability has been identified in OPUPI0 AMQP/MQTT (All versions < V5.30). The affected devices stores MQTT client passwords without sufficient … |
Named by the advisory itself. Each CVE links to its tracked detail page.
Each vendor links to its Known Exploited Vulnerabilities catalog page. Only vendors that appear in the KEV catalog are listed, either because the publication cites one of their KEV entries or because it names them directly.