Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2024-53649 Details

ANALYZED

This CVE record has been analyzed and enriched by NVDAPI.com as an independent party.

Description

A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V9.80), SIPROTEC 5 6MD85 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 6MD86 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 6MD89 (CP300) (All versions >= V7.80 < V9.68), SIPROTEC 5 6MU85 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 7KE85 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 7SA82 (CP100) (All versions >= V7.80 < V8.90), SIPROTEC 5 7SA82 (CP150) (All versions < V9.80), SIPROTEC 5 7SA86 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 7SA87 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 7SD82 (CP100) (All versions >= V7.80 < V8.90), SIPROTEC 5 7SD82 (CP150) (All versions < V9.80), SIPROTEC 5 7SD86 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 7SD87 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 7SJ81 (CP100) (All versions >= V7.80 < V8.90), SIPROTEC 5 7SJ81 (CP150) (All versions < V9.80), SIPROTEC 5 7SJ82 (CP100) (All versions >= V7.80 < V8.90), SIPROTEC 5 7SJ82 (CP150) (All versions < V9.80), SIPROTEC 5 7SJ85 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 7SJ86 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 7SK82 (CP100) (All versions >= V7.80 < V8.90), SIPROTEC 5 7SK82 (CP150) (All versions < V9.80), SIPROTEC 5 7SK85 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 7SL82 (CP100) (All versions >= V7.80 < V8.90), SIPROTEC 5 7SL82 (CP150) (All versions < V9.80), SIPROTEC 5 7SL86 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 7SL87 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 7SS85 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 7ST85 (CP300) (All versions < V9.68), SIPROTEC 5 7ST86 (CP300) (All versions < V9.80), SIPROTEC 5 7SX82 (CP150) (All versions < V9.80), SIPROTEC 5 7SX85 (CP300) (All versions < V9.80), SIPROTEC 5 7SY82 (CP150) (All versions < V9.80), SIPROTEC 5 7UM85 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 7UT82 (CP100) (All versions >= V7.80 < V8.90), SIPROTEC 5 7UT82 (CP150) (All versions < V9.80), SIPROTEC 5 7UT85 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 7UT86 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 7UT87 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 7VE85 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 7VK87 (CP300) (All versions >= V7.80 < V9.80), SIPROTEC 5 7VU85 (CP300) (All versions < V9.80), SIPROTEC 5 Compact 7SX800 (CP050) (All versions < V9.80). Affected devices do not properly limit the path accessible via their webserver. This could allow an authenticated remote attacker to read arbitrary files from the filesystem of affected devices.

Metrics

CVSS 3.x Severity and Vector Strings:

VolerionCVSS-B:6.5 MEDIUMVector:CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CNA: [email protected]CVSS-B:6.5 MEDIUMVector:CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://cert-portal.siemens.com/productcert/html/ssa-194557.html	[email protected]	AdvisoryRemedyVendor

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-552	Files or Directories Accessible to External Parties	[email protected]

Affected Products

Product	Versions
Siemens SIPROTEC 5 6MD84	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation No remediation found in references.
Siemens SIPROTEC 5 6MD85	< V9.80
CPE cpe:2.3:h:siemens:siprotec_5_6md85:::::::: cpe:2.3:o:siemens:siprotec_5_6md85_firmware:::::::: Remediation Upgrade: V9.80moderate efforthttps://support.industry.siemens.com/cs/ww/en/view/109796884 Mitigation:low effort Disable the web server of the affected system.
Siemens SIPROTEC 5 6MD86	< V9.80
CPE cpe:2.3:h:siemens:siprotec_5_6md86:::::::: cpe:2.3:o:siemens:siprotec_5_6md86_firmware:::::::: Remediation Upgrade: V9.80moderate efforthttps://support.industry.siemens.com/cs/ww/en/view/109796884 Mitigation:low effort Disable the web server of the affected system.
Siemens SIPROTEC 5 6MD89	< V9.68 >= V7.80, < V9.80
CPE cpe:2.3:h:siemens:siprotec_5_6md89:::::::: cpe:2.3:o:siemens:siprotec_5_6md89_firmware:::::::: Remediation Upgrade: V9.68moderate effort Mitigation:low effort Disable the web server of the affected system.
Siemens SIPROTEC 5 6MU85	>= V7.80, < V9.80
CPE cpe:2.3:h:siemens:siprotec_5_6mu85:::::::: cpe:2.3:o:siemens:siprotec_5_6mu85_firmware:::::::: Remediation Upgrade: V9.80moderate efforthttps://support.industry.siemens.com/cs/ww/en/view/109796884 Mitigation:low effort Disable the web server of the affected system.
Siemens SIPROTEC 5 7KE85	>= V7.80, < V9.80
CPE cpe:2.3:h:siemens:siprotec_5_7ke85:::::::: cpe:2.3:o:siemens:siprotec_5_7ke85_firmware:::::::: Remediation Upgrade: V9.80moderate efforthttps://support.industry.siemens.com/cs/ww/en/view/109796884 Mitigation:low effort Disable the web server of the affected system.
Siemens SIPROTEC 5 7SA82	All versions
CPE cpe:2.3:h:siemens:siprotec_5_7sa82:::::::: cpe:2.3:o:siemens:siprotec_5_7sa82_firmware:::::::: Remediation Upgrade: V9.80moderate efforthttps://support.industry.siemens.com/cs/ww/en/view/109796884 Mitigation:low effort Disable the web server of the affected system.
Siemens SIPROTEC 5 7SA86	>= V7.80, < V9.80
CPE cpe:2.3:h:siemens:siprotec_5_7sa86:::::::: cpe:2.3:o:siemens:siprotec_5_7sa86_firmware:::::::: Remediation Upgrade: V9.80moderate efforthttps://support.industry.siemens.com/cs/ww/en/view/109796884 Mitigation:low effort Disable the web server of the affected system.
Siemens SIPROTEC 5 7SA87	>= V7.80, < V9.80
CPE cpe:2.3:h:siemens:siprotec_5_7sa87:::::::: cpe:2.3:o:siemens:siprotec_5_7sa87_firmware:::::::: Remediation Upgrade: V9.80moderate efforthttps://support.industry.siemens.com/cs/ww/en/view/109796884 Mitigation:low effort Disable the web server of the affected system.
Siemens SIPROTEC 5 7SD82	>= V7.80, < V9.80
CPE cpe:2.3:h:siemens:siprotec_5_7sd82:::::::: cpe:2.3:o:siemens:siprotec_5_7sd82_firmware:::::::: Remediation Upgrade: V9.80moderate efforthttps://support.industry.siemens.com/cs/ww/en/view/109796884 Mitigation:low effort Disable the web server of the affected system.
Siemens SIPROTEC 5 7SD86	All versions
CPE cpe:2.3:h:siemens:siprotec_5_7sd86:::::::: cpe:2.3:o:siemens:siprotec_5_7sd86_firmware:::::::: Remediation Upgrade: V9.80moderate efforthttps://support.industry.siemens.com/cs/ww/en/view/109796884 Mitigation:low effort Disable the web server of the affected system.
Siemens SIPROTEC 5 7SD87	All versions
CPE cpe:2.3:h:siemens:siprotec_5_7sd87:::::::: cpe:2.3:o:siemens:siprotec_5_7sd87_firmware:::::::: Remediation Upgrade: V9.80moderate efforthttps://support.industry.siemens.com/cs/ww/en/view/109796884 Mitigation:low effort Disable the web server of the affected system.
Siemens SIPROTEC 5 7SJ81	All versions
CPE cpe:2.3:h:siemens:siprotec_5_7sj81:::::::: cpe:2.3:o:siemens:siprotec_5_7sj81_firmware:::::::: Remediation Upgrade: V9.80moderate efforthttps://support.industry.siemens.com/cs/ww/en/view/109796884 Mitigation:low effort Disable the web server of the affected system.
Siemens SIPROTEC 5 7SJ82	All versions
CPE cpe:2.3:h:siemens:siprotec_5_7sj82:::::::: cpe:2.3:o:siemens:siprotec_5_7sj82_firmware:::::::: Remediation Upgrade: V9.80moderate efforthttps://support.industry.siemens.com/cs/ww/en/view/109796884 Mitigation:low effort Disable the web server of the affected system.
Siemens SIPROTEC 5 7SJ85	>= V7.80, < V9.80
CPE cpe:2.3:h:siemens:siprotec_5_7sj85:::::::: cpe:2.3:o:siemens:siprotec_5_7sj85_firmware:::::::: Remediation Upgrade: V9.80moderate efforthttps://support.industry.siemens.com/cs/ww/en/view/109796884 Mitigation:low effort Disable the web server of the affected system.
Siemens SIPROTEC 5 7SJ86	>= V7.80, < V9.80
CPE cpe:2.3:h:siemens:siprotec_5_7sj86:::::::: cpe:2.3:o:siemens:siprotec_5_7sj86_firmware:::::::: Remediation Upgrade: V9.80moderate efforthttps://support.industry.siemens.com/cs/ww/en/view/109796884 Mitigation:low effort Disable the web server of the affected system.
Siemens SIPROTEC 5 7SK82	All versions
CPE cpe:2.3:h:siemens:siprotec_5_7sk82:::::::: cpe:2.3:o:siemens:siprotec_5_7sk82_firmware:::::::: Remediation Upgrade: V9.80moderate efforthttps://support.industry.siemens.com/cs/ww/en/view/109796884 Mitigation:low effort Disable the web server of the affected system.
Siemens SIPROTEC 5 7SK85	>= V7.80, < V9.80
CPE cpe:2.3:h:siemens:siprotec_5_7sk85:::::::: cpe:2.3:o:siemens:siprotec_5_7sk85_firmware:::::::: Remediation Upgrade: V9.80moderate efforthttps://support.industry.siemens.com/cs/ww/en/view/109796884 Mitigation:low effort Disable the web server of the affected system.
Siemens SIPROTEC 5 7SL82	All versions
CPE cpe:2.3:h:siemens:siprotec_5_7sl82:::::::: cpe:2.3:o:siemens:siprotec_5_7sl82_firmware:::::::: Remediation Upgrade: V9.80moderate efforthttps://support.industry.siemens.com/cs/ww/en/view/109796884 Mitigation:low effort Disable the web server of the affected system.
Siemens SIPROTEC 5 7SL86	All versions
CPE cpe:2.3:h:siemens:siprotec_5_7sl86:::::::: cpe:2.3:o:siemens:siprotec_5_7sl86_firmware:::::::: Remediation Upgrade: V9.80moderate efforthttps://support.industry.siemens.com/cs/ww/en/view/109796884 Mitigation:low effort Disable the web server of the affected system.
Siemens SIPROTEC 5 7SL87	All versions
CPE cpe:2.3:h:siemens:siprotec_5_7sl87:::::::: cpe:2.3:o:siemens:siprotec_5_7sl87_firmware:::::::: Remediation Upgrade: V9.80moderate efforthttps://support.industry.siemens.com/cs/ww/en/view/109796884 Mitigation:low effort Disable the web server of the affected system.
Siemens SIPROTEC 5 7SS85	All versions
CPE cpe:2.3:h:siemens:siprotec_5_7ss85:::::::: cpe:2.3:o:siemens:siprotec_5_7ss85_firmware:::::::: Remediation Upgrade: V9.80moderate efforthttps://support.industry.siemens.com/cs/ww/en/view/109796884 Mitigation:low effort Disable the web server of the affected system.
Siemens SIPROTEC 5 7ST85	< V9.68
CPE cpe:2.3:h:siemens:siprotec_5_7st85:::::::: cpe:2.3:o:siemens:siprotec_5_7st85_firmware:::::::: Remediation Upgrade: V9.68moderate effort Mitigation:low effort Disable the web server of the affected system.
Siemens SIPROTEC 5 7ST86	All versions
CPE cpe:2.3:h:siemens:siprotec_5_7st86:::::::: cpe:2.3:o:siemens:siprotec_5_7st86_firmware:::::::: Remediation Upgrade: V9.80moderate efforthttps://support.industry.siemens.com/cs/ww/en/view/109796884 Mitigation:low effort Disable the web server of the affected system.
Siemens SIPROTEC 5 7SX82	All versions
CPE cpe:2.3:h:siemens:siprotec_5_7sx82:::::::: cpe:2.3:o:siemens:siprotec_5_7sx82_firmware:::::::: Remediation Upgrade: V9.80moderate efforthttps://support.industry.siemens.com/cs/ww/en/view/109796884 Mitigation:low effort Disable the web server of the affected system.
Siemens SIPROTEC 5 7SX85	All versions
CPE cpe:2.3:h:siemens:siprotec_5_7sx85:::::::: cpe:2.3:o:siemens:siprotec_5_7sx85_firmware:::::::: Remediation Upgrade: V9.80moderate efforthttps://support.industry.siemens.com/cs/ww/en/view/109796884 Mitigation:low effort Disable the web server of the affected system.
Siemens SIPROTEC 5 7SY82	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation No remediation found in references.
Siemens SIPROTEC 5 7UM85	>= V7.80, < V9.80
CPE cpe:2.3:h:siemens:siprotec_5_7um85:::::::: cpe:2.3:o:siemens:siprotec_5_7um85_firmware:::::::: Remediation Upgrade: V9.80moderate efforthttps://support.industry.siemens.com/cs/ww/en/view/109796884 Mitigation:low effort Disable the web server of the affected system.
Siemens SIPROTEC 5 7UT82	All versions
CPE cpe:2.3:h:siemens:siprotec_5_7ut82:::::::: cpe:2.3:o:siemens:siprotec_5_7ut82_firmware:::::::: Remediation Upgrade: V9.80moderate efforthttps://support.industry.siemens.com/cs/ww/en/view/109796884 Mitigation:low effort Disable the web server of the affected system.
Siemens SIPROTEC 5 7UT85	All versions
CPE cpe:2.3:h:siemens:siprotec_5_7ut85:::::::: cpe:2.3:o:siemens:siprotec_5_7ut85_firmware:::::::: Remediation Upgrade: V9.80moderate efforthttps://support.industry.siemens.com/cs/ww/en/view/109796884 Mitigation:low effort Disable the web server of the affected system.
Siemens SIPROTEC 5 7UT86	All versions
CPE cpe:2.3:h:siemens:siprotec_5_7ut86:::::::: cpe:2.3:o:siemens:siprotec_5_7ut86_firmware:::::::: Remediation Upgrade: V9.80moderate efforthttps://support.industry.siemens.com/cs/ww/en/view/109796884 Mitigation:low effort Disable the web server of the affected system.
Siemens SIPROTEC 5 7UT87	All versions
CPE cpe:2.3:h:siemens:siprotec_5_7ut87:::::::: cpe:2.3:o:siemens:siprotec_5_7ut87_firmware:::::::: Remediation Upgrade: V9.80moderate efforthttps://support.industry.siemens.com/cs/ww/en/view/109796884 Mitigation:low effort Disable the web server of the affected system.
Siemens SIPROTEC 5 7VE85	>= V7.80, < V9.80
CPE cpe:2.3:h:siemens:siprotec_5_7ve85:::::::: cpe:2.3:o:siemens:siprotec_5_7ve85_firmware:::::::: Remediation Upgrade: V9.80moderate efforthttps://support.industry.siemens.com/cs/ww/en/view/109796884 Mitigation:low effort Disable the web server of the affected system.
Siemens SIPROTEC 5 7VK87	All versions
CPE cpe:2.3:h:siemens:siprotec_5_7vk87:::::::: cpe:2.3:o:siemens:siprotec_5_7vk87_firmware:::::::: Remediation Upgrade: V9.80moderate efforthttps://support.industry.siemens.com/cs/ww/en/view/109796884 Mitigation:low effort Disable the web server of the affected system.
Siemens SIPROTEC 5 7VU85	< V9.80
CPE cpe:2.3:h:siemens:siprotec_5_7vu85:::::::: cpe:2.3:o:siemens:siprotec_5_7vu85_firmware:::::::: Remediation Upgrade: V9.80moderate efforthttps://support.industry.siemens.com/cs/ww/en/view/109796884 Mitigation:low effort Disable the web server of the affected system.
Siemens SIPROTEC 5 Compact 7SX800	< V9.80
CPE cpe:2.3:h:siemens:siprotec_5_compact_7sx800:::::::: cpe:2.3:o:siemens:siprotec_5_compact_7sx800_firmware:::::::: Remediation Upgrade: V9.80moderate efforthttps://support.industry.siemens.com/cs/ww/en/view/109796884 Mitigation:low effort Disable the web server of the affected system.

Change History

6 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	[email protected]
Jun 17, 2026	CVE Modified	CISA-ADP
Nov 11, 2025	CVE Modified	[email protected]
Mar 11, 2025	CVE Modified	[email protected]
Feb 11, 2025	CVE Modified	[email protected]
Jan 14, 2025	New CVE Received	[email protected]

CVE-2024-53649 Details

ANALYZED

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

Change History