CVE-2024-52504 Information

Aug 13, 2025 cve

Description

A vulnerability has been identified in SIPROTEC 4 6MD61 (All versions) SIPROTEC 4 6MD63 (All versions) SIPROTEC 4 6MD66 (All versions) SIPROTEC 4 6MD665 (All versions) SIPROTEC 4 7SA522 (All versions) SIPROTEC 4 7SA6 (All versions < V4.78) SIPROTEC 4 7SD5 (All versions < V4.78) SIPROTEC 4 7SD610 (All versions < V4.78) SIPROTEC 4 7SJ61 (All versions) SIPROTEC 4 7SJ62 (All versions) SIPROTEC 4 7SJ63 (All versions) SIPROTEC 4 7SJ64 (All versions) SIPROTEC 4 7SJ66 (All versions) SIPROTEC 4 7SS52 (All versions) SIPROTEC 4 7ST6 (All versions) SIPROTEC 4 7UM61 (All versions) SIPROTEC 4 7UM62 (All versions) SIPROTEC 4 7UT612 (All versions) SIPROTEC 4 7UT613 (All versions) SIPROTEC 4 7UT63 (All versions) SIPROTEC 4 7VE6 (All versions) SIPROTEC 4 7VK61 (All versions) SIPROTEC 4 7VU683 (All versions) SIPROTEC 4 Compact 7RW80 (All versions) SIPROTEC 4 Compact 7SD80 (All versions) SIPROTEC 4 Compact 7SJ80 (All versions) SIPROTEC 4 Compact 7SJ81 (All versions) SIPROTEC 4 Compact 7SK80 (All versions) SIPROTEC 4 Compact 7SK81 (All versions). Affected devices do not properly handle interrupted operations of file transfer. This could allow an unauthenticated remote attacker to cause a denial of service condition. To restore normal operations the devices need to be restarted.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Reference

https://cert-portal.siemens.com/productcert/html/ssa-400089.html

Attack Complexity

LOW

Privileges Required

NONE

User Interaction Required

NONE

Scope

NONE

Confidentiality Impact

UNCHANGED

Integrity Impact

NONE

Availability Impact

NONE

Base Score

HIGH

Base Severity

7.5

CNNVD-202508-1025 (Published: 2025-08-12)

Share on: