Advisories · Technology

Siemens SIPROTEC 5 6MU85 (CP300).

Every CVE that names Siemens SIPROTEC 5 6MU85 (CP300) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-40808 CVE record

CVSS 6.9 Medium

Unrestricted file upload in Siemens SIPROTEC 5 6MD84 (CP300) and others
- Siemens SIPROTEC 5 6MD84 (CP300)
- Siemens SIPROTEC 5 6MD85 (CP200)
- Unrestricted file upload
Not analysed yet 9 Jun 2026
CVE-2024-54017 CVE record

CVSS 6.9 Medium

Siemens SIPROTEC 5 6MD84 (CP300): A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V11.0)…
- Siemens SIPROTEC 5 6MD84 (CP300)
- Siemens SIPROTEC 5 6MD85 (CP200)
- CWE-334
Not analysed yet 12 May 2026
CVE-2025-40570 CVE record

CVSS 2.4 Low

Resource allocation without limits in Siemens SIPROTEC 5 6MD84 (CP300) and others
- Siemens SIPROTEC 5 6MD84 (CP300)
- Siemens SIPROTEC 5 6MD85 (CP300)
- Denial of service
Not analysed yet 12 Aug 2025
CVE-2025-40742 CVE record

CVSS 6.0 Medium

Siemens SIPROTEC 5 6MD84 (CP300): A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V11.0)…
- Siemens SIPROTEC 5 6MD84 (CP300)
- Siemens SIPROTEC 5 6MD85 (CP200)
- CWE-598
Not analysed yet 8 Jul 2025
CVE-2024-54015 CVE record

CVSS 8.7 High

Siemens SIPROTEC 5 6MD84 (CP300): A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V9.90)…
- Siemens SIPROTEC 5 6MD84 (CP300)
- Siemens SIPROTEC 5 6MD85 (CP300)
- CWE-1392
Not analysed yet 11 Feb 2025
CVE-2024-53651 CVE record

CVSS 5.1 Medium

Cleartext storage of sensitive information in Siemens SIPROTEC 5 6MD84 (CP300) and others
- Siemens SIPROTEC 5 6MD84 (CP300)
- Siemens SIPROTEC 5 6MD85 (CP200)
- Information disclosure
Not analysed yet 11 Feb 2025
CVE-2024-53648 CVE record

CVSS 7.0 High

Active debug code in Siemens SIPROTEC 5 6MD84 (CP300) and others
- Siemens SIPROTEC 5 6MD84 (CP300)
- Siemens SIPROTEC 5 6MD85 (CP200)
- CWE-489
Not analysed yet 11 Feb 2025
CVE-2024-53649 CVE record

CVSS 7.1 High

Files accessible to external parties in Siemens SIPROTEC 5 6MD84 (CP300) and others
- Siemens SIPROTEC 5 6MD84 (CP300)
- Siemens SIPROTEC 5 6MD85 (CP300)
- Information disclosure
Not analysed yet 14 Jan 2025
CVE-2024-38867 CVE record

CVSS 8.2 High

Weak encryption in Siemens SIPROTEC 5 6MD84 (CP300) and others
- Siemens SIPROTEC 5 6MD84 (CP300)
- Siemens SIPROTEC 5 6MD85 (CP200)
- Weak cryptography or TLS
Not analysed yet 9 Jul 2024
CVE-2023-28766 CVE record

CVSS 7.5 High

NULL pointer dereference in Siemens SIPROTEC 5 6MD85 (CP300) and others
- Siemens SIPROTEC 5 6MD85 (CP300)
- Siemens SIPROTEC 5 6MD86 (CP300)
- Memory corruption
Not analysed yet 11 Apr 2023
CVE-2022-45044 CVE record

CVSS 5.3 Medium

Uncontrolled resource consumption in Siemens SIPROTEC 5 6MD84 (CP300) and others
- Siemens SIPROTEC 5 6MD84 (CP300)
- Siemens SIPROTEC 5 6MD85 (CP200)
- Denial of service
Not analysed yet 13 Dec 2022