CVE-2024-52504

State
Published
Severity
8.7 High
Published
Aug 12, 2025
Updated
Aug 12, 2025
Reserved
Nov 11, 2024

Read the record on cve.org

Description

A vulnerability has been identified in SIPROTEC 4 6MD61 (All versions), SIPROTEC 4 6MD63 (All versions), SIPROTEC 4 6MD66 (All versions), SIPROTEC 4 6MD665 (All versions), SIPROTEC 4 7SA522 (All versions), SIPROTEC 4 7SA6 (All versions < V4.78), SIPROTEC 4 7SD5 (All versions < V4.78), SIPROTEC 4 7SD610 (All versions < V4.78), SIPROTEC 4 7SJ61 (All versions), SIPROTEC 4 7SJ62 (All versions), SIPROTEC 4 7SJ63 (All versions), SIPROTEC 4 7SJ64 (All versions), SIPROTEC 4 7SJ66 (All versions), SIPROTEC 4 7SS52 (All versions), SIPROTEC 4 7ST6 (All versions), SIPROTEC 4 7UM61 (All versions), SIPROTEC 4 7UM62 (All versions), SIPROTEC 4 7UT612 (All versions), SIPROTEC 4 7UT613 (All versions), SIPROTEC 4 7UT63 (All versions), SIPROTEC 4 7VE6 (All versions), SIPROTEC 4 7VK61 (All versions), SIPROTEC 4 7VU683 (All versions), SIPROTEC 4 Compact 7RW80 (All versions), SIPROTEC 4 Compact 7SD80 (All versions), SIPROTEC 4 Compact 7SJ80 (All versions), SIPROTEC 4 Compact 7SJ81 (All versions), SIPROTEC 4 Compact 7SK80 (All versions), SIPROTEC 4 Compact 7SK81 (All versions). Affected devices do not properly handle interrupted operations of file transfer. This could allow an unauthenticated remote attacker to cause a denial of service condition. To restore normal operations, the devices need to be restarted.

Scores

CVSSScoreVectorSource
4.08.7 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:Nsiemens
3.17.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsiemens

Weaknesses

  • CWE-754 Improper Check for Unusual or Exceptional Conditions

Affected Products

ProductVersions
SIPROTEC 4 6MD61Siemens
  • all versionsAffected
SIPROTEC 4 6MD63Siemens
  • all versionsAffected
SIPROTEC 4 6MD66Siemens
  • all versionsAffected
SIPROTEC 4 6MD665Siemens
  • all versionsAffected
SIPROTEC 4 7SA522Siemens
  • all versionsAffected
SIPROTEC 4 7SA6Siemens
  • before V4.78Affected
SIPROTEC 4 7SD5Siemens
  • before V4.78Affected
SIPROTEC 4 7SD610Siemens
  • before V4.78Affected
SIPROTEC 4 7SJ61Siemens
  • all versionsAffected
SIPROTEC 4 7SJ62Siemens
  • all versionsAffected
SIPROTEC 4 7SJ63Siemens
  • all versionsAffected
SIPROTEC 4 7SJ64Siemens
  • all versionsAffected
SIPROTEC 4 7SJ66Siemens
  • all versionsAffected
SIPROTEC 4 7SS52Siemens
  • all versionsAffected
SIPROTEC 4 7ST6Siemens
  • all versionsAffected
SIPROTEC 4 7UM61Siemens
  • all versionsAffected
SIPROTEC 4 7UM62Siemens
  • all versionsAffected
SIPROTEC 4 7UT612Siemens
  • all versionsAffected
SIPROTEC 4 7UT613Siemens
  • all versionsAffected
SIPROTEC 4 7UT63Siemens
  • all versionsAffected
SIPROTEC 4 7VE6Siemens
  • all versionsAffected
SIPROTEC 4 7VK61Siemens
  • all versionsAffected
SIPROTEC 4 7VU683Siemens
  • all versionsAffected
SIPROTEC 4 Compact 7RW80Siemens
  • all versionsAffected
SIPROTEC 4 Compact 7SD80Siemens
  • all versionsAffected
SIPROTEC 4 Compact 7SJ80Siemens
  • all versionsAffected
SIPROTEC 4 Compact 7SJ81Siemens
  • all versionsAffected
SIPROTEC 4 Compact 7SK80Siemens
  • all versionsAffected
SIPROTEC 4 Compact 7SK81Siemens
  • all versionsAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.