PT-2021-4201 · Siemens · Siprotec 5

Published 2021-09-14 · Updated 2021-12-16 · CVE-2021-33719

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions SIPROTEC 5 relays with CPU variants CP050 versions prior to V8.80 SIPROTEC 5 relays with CPU variants CP100 versions prior to V8.80 SIPROTEC 5 relays with CPU variants CP200 versions prior to V8.80 SIPROTEC 5 relays with CPU variants CP300 versions prior to V8.80

Description The issue is caused by a buffer overflow on the stack. Exploitation of this issue may allow a remote attacker to execute arbitrary code by sending specially crafted packets to port 4443/tcp. This could also cause a Denial-of-Service condition.

Recommendations For SIPROTEC 5 relays with CPU variants CP050 versions prior to V8.80, update to version V8.80 or later. For SIPROTEC 5 relays with CPU variants CP100 versions prior to V8.80, update to version V8.80 or later. For SIPROTEC 5 relays with CPU variants CP200, update to version V8.80 or later. For SIPROTEC 5 relays with CPU variants CP300 versions prior to V8.80, update to version V8.80 or later. As a temporary workaround, consider restricting access to port 4443/tcp to minimize the risk of exploitation.

Fix

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

BDU:2021-04798

CVE-2021-33719

Affected Products

Siprotec 5

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2021-33719 · Security Note
• https://cert-portal.siemens.com/productcert/pdf/ssa-847986.pdf · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-04798 · Security Note
• https://osv.dev/vulnerability/CVE-2021-33719 · Vendor Advisory
• https://t.me/cibsecurity/28770 · Telegram Post