Siemens Siprotec 5 With CPU Variant CP300 vulnerabilities

4 CVEs affecting Siemens Siprotec 5 With CPU Variant CP300, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-37206, published 2021-09-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-33719, published 2021-09-14. Critical severity, CVSS 9.8. EPSS: 2.2% chance of exploitation in the next 30 days. A vulnerability has been identified in SIPROTEC 5 relays with CPU variants CP050 (All versions < V8.80), SIPROTEC 5 relays with CPU variants CP100 (All versions < V8.80), SIPROTEC 5 relays with CPU…
CVE-2021-37206, published 2021-09-14. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. A vulnerability has been identified in SIPROTEC 5 relays with CPU variants CP050 (All versions < V8.80), SIPROTEC 5 relays with CPU variants CP100 (All versions < V8.80), SIPROTEC 5 relays with CPU…
CVE-2018-16563, published 2019-03-21. Medium severity, CVSS 5.9. EPSS: 1.2% chance of exploitation in the next 30 days. A vulnerability has been identified in Firmware variant IEC 61850 for EN100 Ethernet module (All versions < V4.35), Firmware variant MODBUS TCP for EN100 Ethernet module (All versions), Firmware…
CVE-2021-33720, published 2021-09-14. High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability has been identified in SIPROTEC 5 relays with CPU variants CP050 (All versions < V8.80), SIPROTEC 5 relays with CPU variants CP100 (All versions < V8.80), SIPROTEC 5 relays with CPU…