PT-2025-32645 · Siemens · Siprotec 4 7Ut612+28

Published 2025-08-12 · Updated 2025-08-17 · CVE-2024-52504

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: SIPROTEC 4 6MD61 (affected versions not specified) SIPROTEC 4 6MD63 (affected versions not specified) SIPROTEC 4 6MD66 (affected versions not specified) SIPROTEC 4 6MD665 (affected versions not specified) SIPROTEC 4 7SA522 (affected versions not specified) SIPROTEC 4 7SA6 versions prior to 4.78 SIPROTEC 4 7SD5 versions prior to 4.78 SIPROTEC 4 7SD610 versions prior to 4.78 SIPROTEC 4 7SJ61 (affected versions not specified) SIPROTEC 4 7SJ62 (affected versions not specified) SIPROTEC 4 7SJ63 (affected versions not specified) SIPROTEC 4 7SJ64 (affected versions not specified) SIPROTEC 4 7SJ66 (affected versions not specified) SIPROTEC 4 7SS52 (affected versions not specified) SIPROTEC 4 7ST6 (affected versions not specified) SIPROTEC 4 7UM61 (affected versions not specified) SIPROTEC 4 7UM62 (affected versions not specified) SIPROTEC 4 7UT612 (affected versions not specified) SIPROTEC 4 7UT613 (affected versions not specified) SIPROTEC 4 7UT63 (affected versions not specified) SIPROTEC 4 7VE6 (affected versions not specified) SIPROTEC 4 7VK61 (affected versions not specified) SIPROTEC 4 7VU683 (affected versions not specified) SIPROTEC 4 Compact 7RW80 (affected versions not specified) SIPROTEC 4 Compact 7SD80 (affected versions not specified) SIPROTEC 4 Compact 7SJ80 (affected versions not specified) SIPROTEC 4 Compact 7SJ81 (affected versions not specified) SIPROTEC 4 Compact 7SK80 (affected versions not specified) SIPROTEC 4 Compact 7SK81 (affected versions not specified)

Description: The devices do not properly handle interrupted operations of file transfer, which could allow a remote attacker to cause a denial of service condition. A restart of the devices is required to restore normal operations.

Recommendations: SIPROTEC 4 7SA6 versions prior to 4.78: Update to version 4.78 or later. SIPROTEC 4 7SD5 versions prior to 4.78: Update to version 4.78 or later. SIPROTEC 4 7SD610 versions prior to 4.78: Update to version 4.78 or later. All other affected versions: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Improper Check for Exceptional Conditions

Weakness Enumeration

CWE-754

Related Identifiers

CVE-2024-52504

Affected Products

Siprotec 4 6Md61

Siprotec 4 6Md63

Siprotec 4 6Md66

Siprotec 4 6Md665

Siprotec 4 7Sa522

Siprotec 4 7Sa6

Siprotec 4 7Sd5

Siprotec 4 7Sd610

Siprotec 4 7Sj61

Siprotec 4 7Sj62

Siprotec 4 7Sj63

Siprotec 4 7Sj64

Siprotec 4 7Sj66

Siprotec 4 7Ss52

Siprotec 4 7St6

Siprotec 4 7Um61

Siprotec 4 7Um62

Siprotec 4 7Ut612

Siprotec 4 7Ut613

Siprotec 4 7Ut63

Siprotec 4 7Ve6

Siprotec 4 7Vk61

Siprotec 4 7Vu683

Siprotec 4 Compact 7Rw80

Siprotec 4 Compact 7Sd80

Siprotec 4 Compact 7Sj80

Siprotec 4 Compact 7Sj81

Siprotec 4 Compact 7Sk80

Siprotec 4 Compact 7Sk81

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2024-52504 · Security Note
• https://twitter.com/CVEnew/status/1955230598345142713 · Twitter Post
• https://twitter.com/cracbot/status/1957034732429930758 · Twitter Post
• https://cert-portal.siemens.com/productcert/html/ssa-400089.html · Note
• https://t.me/CVEtracker/29766 · Telegram Post