Siemens SIPROTEC 5

This CISA advisory details a critical vulnerability in Siemens SIPROTEC 5 devices due to the use of insufficiently random session identifiers. An unauthenticated remote attacker could potentially exploit this weakness to hijack user sessions and gain unauthorized access to limited information. Siemens has released fix…