vulnerability
Siemens SIPROTEC 5 Using DIGSI5 Protocol
High
Summary
This CISA advisory details a vulnerability in Siemens SIPROTEC 5 devices, specifically utilizing the DIGSI5 protocol, that allows authenticated users to upload arbitrary files. This could lead to denial-of-service conditions and potentially enable malicious code execution. Siemens recommends upgrading to version 9.90 or later to mitigate this risk, which includes implementing an allow-list feature to restrict file uploads.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data