CVE-2021-41769: Siemens 6md85 Firmware

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

A vulnerability has been identified in SIPROTEC 5 6MD85 devices (CPU variant CP300) (All versions < V8.83), SIPROTEC 5 6MD86 devices (CPU variant CP300) (All versions < V8.83), SIPROTEC 5 6MD89 devices (CPU variant CP300) (All versions < V8.83), SIPROTEC 5 6MU85 devices (CPU variant CP300) (All versions < V8.83), SIPROTEC 5 7KE85 devices (CPU variant CP300) (All versions < V8.83), SIPROTEC 5 7SA82 devices (CPU variant CP100) (All versions < V8.83), SIPROTEC 5 7SA86 devices (CPU variant CP300) (All versions < V8.83), SIPROTEC 5 7SA87 devices (CPU variant CP300) (All versions < V8.83), SIPROTEC 5 7SD82 devices (CPU variant CP100) (All versions < V8.83), SIPROTEC 5 7SD86 devices (CPU variant CP300) (All versions < V8.83), SIPROTEC 5 7SD87 devices (CPU variant CP300) (All versions < V8.83), SIPROTEC 5 7SJ81 devices (CPU variant CP100) (All versions < V8.83), SIPROTEC 5 7SJ82 devices (CPU variant CP100) (All versions < V8.83), SIPROTEC 5 7SJ85 devices (CPU variant CP300) (All versions < V8.83), SIPROTEC 5 7SJ86 devices (CPU variant CP300) (All versions < V8.83), SIPROTEC 5 7SK82 devices (CPU variant CP100) (All versions < V8.83), SIPROTEC 5 7SK85 devices (CPU variant CP300) (All versions < V8.83), SIPROTEC 5 7SL82 devices (CPU variant CP100) (All versions < V8.83), SIPROTEC 5 7SL86 devices (CPU variant CP300) (All versions < V8.83), SIPROTEC 5 7SL87 devices (CPU variant CP300) (All versions < V8.83), SIPROTEC 5 7SS85 devices (CPU variant CP300) (All versions < V8.83), SIPROTEC 5 7ST85 devices (CPU variant CP300) (All versions < V8.83), SIPROTEC 5 7SX85 devices (CPU variant CP300) (All versions < V8.83), SIPROTEC 5 7UM85 devices (CPU variant CP300) (All versions < V8.83), SIPROTEC 5 7UT82 devices (CPU variant CP100) (All versions < V8.83), SIPROTEC 5 7UT85 devices (CPU variant CP300) (All versions < V8.83), SIPROTEC 5 7UT86 devices (CPU variant CP300) (All versions < V8.83), SIPROTEC 5 7UT87 devices (CPU variant CP300) (All versions < V8.83), SIPROTEC 5 7VE85 devices (CPU variant CP300) (All versions < V8.83), SIPROTEC 5 7VK87 devices (CPU variant CP300) (All versions < V8.83), SIPROTEC 5 Compact 7SX800 devices (CPU variant CP050) (All versions < V8.83). An improper input validation vulnerability in the web server could allow an unauthenticated user to access device information.

Affected products

Siemens 6md85 Firmware: before 8.83 (fixed in 8.83)
Siemens 6md86 Firmware: before 8.83 (fixed in 8.83)
Siemens 6md89 Firmware: before 8.83 (fixed in 8.83)
Siemens 6mu85 Firmware: before 8.83 (fixed in 8.83)
Siemens 7ke85 Firmware: before 8.83 (fixed in 8.83)
Siemens 7sa82 Firmware: before 8.83 (fixed in 8.83)
Siemens 7sa86 Firmware: before 8.83 (fixed in 8.83)
Siemens 7sa87 Firmware: before 8.83 (fixed in 8.83)
Siemens 7sd82 Firmware: before 8.83 (fixed in 8.83)
Siemens 7sd86 Firmware: before 8.83 (fixed in 8.83)
Siemens 7sd87 Firmware: before 8.83 (fixed in 8.83)
Siemens 7sj81 Firmware: before 8.83 (fixed in 8.83)
Siemens 7sj82 Firmware: before 8.83 (fixed in 8.83)
Siemens 7sj85 Firmware: before 8.83 (fixed in 8.83)
Siemens 7sj86 Firmware: before 8.83 (fixed in 8.83)
Siemens 7sk82 Firmware: before 8.83 (fixed in 8.83)
Siemens 7sk85 Firmware: before 8.83 (fixed in 8.83)
Siemens 7sl82 Firmware: before 8.83 (fixed in 8.83)
Siemens 7sl86 Firmware: before 8.83 (fixed in 8.83)
Siemens 7sl87 Firmware: before 8.83 (fixed in 8.83)
Siemens 7ss85 Firmware: before 8.83 (fixed in 8.83)
Siemens 7st85 Firmware: before 8.83 (fixed in 8.83)
Siemens 7sx800 Firmware: before 8.83 (fixed in 8.83)
Siemens 7sx85 Firmware: before 8.83 (fixed in 8.83)
Siemens 7um85 Firmware: before 8.83 (fixed in 8.83)
and 6 more

Published 2022-01-11. Last modified 2026-06-17.