Vulnerability Details CVE-2022-45044
A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V9.50), SIPROTEC 5 6MD85 (CP200) (All versions), SIPROTEC 5 6MD85 (CP300) (All versions < V9.50), SIPROTEC 5 6MD86 (CP200) (All versions), SIPROTEC 5 6MD86 (CP300) (All versions < V9.50), SIPROTEC 5 6MD89 (CP300) (All versions < V9.64), SIPROTEC 5 6MU85 (CP300) (All versions < V9.50), SIPROTEC 5 7KE85 (CP200) (All versions), SIPROTEC 5 7KE85 (CP300) (All versions < V9.64), SIPROTEC 5 7SA82 (CP100) (All versions), SIPROTEC 5 7SA82 (CP150) (All versions < V9.50), SIPROTEC 5 7SA84 (CP200) (All versions), SIPROTEC 5 7SA86 (CP200) (All versions), SIPROTEC 5 7SA86 (CP300) (All versions < V9.50), SIPROTEC 5 7SA87 (CP200) (All versions), SIPROTEC 5 7SA87 (CP300) (All versions < V9.50), SIPROTEC 5 7SD82 (CP100) (All versions), SIPROTEC 5 7SD82 (CP150) (All versions < V9.50), SIPROTEC 5 7SD84 (CP200) (All versions), SIPROTEC 5 7SD86 (CP200) (All versions), SIPROTEC 5 7SD86 (CP300) (All versions < V9.50), SIPROTEC 5 7SD87 (CP200) (All versions), SIPROTEC 5 7SD87 (CP300) (All versions < V9.50), SIPROTEC 5 7SJ81 (CP100) (All versions < V8.89), SIPROTEC 5 7SJ81 (CP150) (All versions < V9.50), SIPROTEC 5 7SJ82 (CP100) (All versions < V8.89), SIPROTEC 5 7SJ82 (CP150) (All versions < V9.50), SIPROTEC 5 7SJ85 (CP200) (All versions), SIPROTEC 5 7SJ85 (CP300) (All versions < V9.50), SIPROTEC 5 7SJ86 (CP200) (All versions), SIPROTEC 5 7SJ86 (CP300) (All versions < V9.50), SIPROTEC 5 7SK82 (CP100) (All versions < V8.89), SIPROTEC 5 7SK82 (CP150) (All versions < V9.50), SIPROTEC 5 7SK85 (CP200) (All versions), SIPROTEC 5 7SK85 (CP300) (All versions < V9.50), SIPROTEC 5 7SL82 (CP100) (All versions), SIPROTEC 5 7SL82 (CP150) (All versions < V9.50), SIPROTEC 5 7SL86 (CP200) (All versions), SIPROTEC 5 7SL86 (CP300) (All versions < V9.50), SIPROTEC 5 7SL87 (CP200) (All versions), SIPROTEC 5 7SL87 (CP300) (All versions < V9.50), SIPROTEC 5 7SS85 (CP200) (All versions), SIPROTEC 5 7SS85 (CP300) (All versions < V9.50), SIPROTEC 5 7ST85 (CP200) (All versions), SIPROTEC 5 7ST85 (CP300) (All versions < V9.64), SIPROTEC 5 7ST86 (CP300) (All versions < V9.64), SIPROTEC 5 7SX82 (CP150) (All versions < V9.50), SIPROTEC 5 7SX85 (CP300) (All versions < V9.50), SIPROTEC 5 7UM85 (CP300) (All versions < V9.50), SIPROTEC 5 7UT82 (CP100) (All versions), SIPROTEC 5 7UT82 (CP150) (All versions < V9.50), SIPROTEC 5 7UT85 (CP200) (All versions), SIPROTEC 5 7UT85 (CP300) (All versions < V9.50), SIPROTEC 5 7UT86 (CP200) (All versions), SIPROTEC 5 7UT86 (CP300) (All versions < V9.50), SIPROTEC 5 7UT87 (CP200) (All versions), SIPROTEC 5 7UT87 (CP300) (All versions < V9.50), SIPROTEC 5 7VE85 (CP300) (All versions < V9.50), SIPROTEC 5 7VK87 (CP200) (All versions), SIPROTEC 5 7VK87 (CP300) (All versions < V9.50), SIPROTEC 5 7VU85 (CP300) (All versions < V9.50), SIPROTEC 5 Communication Module ETH-BA-2EL (All versions < V8.89 installed on CP100 devices), SIPROTEC 5 Communication Module ETH-BA-2EL (All versions < V9.50 installed on CP150 and CP300 devices), SIPROTEC 5 Communication Module ETH-BA-2EL (All versions installed on CP200 devices), SIPROTEC 5 Communication Module ETH-BB-2FO (All versions < V8.89 installed on CP100 devices), SIPROTEC 5 Communication Module ETH-BB-2FO (All versions < V9.50 installed on CP150 and CP300 devices), SIPROTEC 5 Communication Module ETH-BB-2FO (All versions installed on CP200 devices), SIPROTEC 5 Communication Module ETH-BD-2FO (All versions < V9.50), SIPROTEC 5 Compact 7SX800 (CP050) (All versions < V9.50). Affected devices do not properly restrict secure client-initiated renegotiations within the SSL and TLS protocols. This could allow an attacker to create a denial of service condition on the ports 443/tcp and 4443/tcp for the duration of the attack.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 31.7%
CVSS Severity
CVSS v3 Score 5.3
Products affected by CVE-2022-45044
-
cpe:2.3:h:siemens:siprotec_5_6md85:cp200
-
cpe:2.3:h:siemens:siprotec_5_6md85:cp300
-
cpe:2.3:h:siemens:siprotec_5_6md86:cp200
-
cpe:2.3:h:siemens:siprotec_5_6md86:cp300
-
cpe:2.3:h:siemens:siprotec_5_6md89:cp300
-
cpe:2.3:h:siemens:siprotec_5_6mu85:cp200
-
cpe:2.3:h:siemens:siprotec_5_6mu85:cp300
-
cpe:2.3:h:siemens:siprotec_5_7ke85:cp200
-
cpe:2.3:h:siemens:siprotec_5_7ke85:cp300
-
cpe:2.3:h:siemens:siprotec_5_7sa82:cp100
-
cpe:2.3:h:siemens:siprotec_5_7sa82:cp150
-
cpe:2.3:h:siemens:siprotec_5_7sa86:cp200
-
cpe:2.3:h:siemens:siprotec_5_7sa86:cp300
-
cpe:2.3:h:siemens:siprotec_5_7sa87:cp200
-
cpe:2.3:h:siemens:siprotec_5_7sa87:cp300
-
cpe:2.3:h:siemens:siprotec_5_7sd82:cp100
-
cpe:2.3:h:siemens:siprotec_5_7sd82:cp150
-
cpe:2.3:h:siemens:siprotec_5_7sd86:cp200
-
cpe:2.3:h:siemens:siprotec_5_7sd86:cp300
-
cpe:2.3:h:siemens:siprotec_5_7sd87:cp200
-
cpe:2.3:h:siemens:siprotec_5_7sd87:cp300
-
cpe:2.3:h:siemens:siprotec_5_7sj81:cp100
-
cpe:2.3:h:siemens:siprotec_5_7sj81:cp150
-
cpe:2.3:h:siemens:siprotec_5_7sj82:cp100
-
cpe:2.3:h:siemens:siprotec_5_7sj82:cp150
-
cpe:2.3:h:siemens:siprotec_5_7sj85:cp200
-
cpe:2.3:h:siemens:siprotec_5_7sj85:cp300
-
cpe:2.3:h:siemens:siprotec_5_7sj86:cp200
-
cpe:2.3:h:siemens:siprotec_5_7sj86:cp300
-
cpe:2.3:h:siemens:siprotec_5_7sk82:cp100
-
cpe:2.3:h:siemens:siprotec_5_7sk82:cp150
-
cpe:2.3:h:siemens:siprotec_5_7sk85:cp200
-
cpe:2.3:h:siemens:siprotec_5_7sk85:cp300
-
cpe:2.3:h:siemens:siprotec_5_7sl82:cp100
-
cpe:2.3:h:siemens:siprotec_5_7sl82:cp150
-
cpe:2.3:h:siemens:siprotec_5_7sl86:cp200
-
cpe:2.3:h:siemens:siprotec_5_7sl86:cp300
-
cpe:2.3:h:siemens:siprotec_5_7sl87:cp200
-
cpe:2.3:h:siemens:siprotec_5_7sl87:cp300
-
cpe:2.3:h:siemens:siprotec_5_7ss85:cp200
-
cpe:2.3:h:siemens:siprotec_5_7ss85:cp300
-
cpe:2.3:h:siemens:siprotec_5_7st85:cp200
-
cpe:2.3:h:siemens:siprotec_5_7st85:cp300
-
cpe:2.3:h:siemens:siprotec_5_7sx85:cp300
-
cpe:2.3:h:siemens:siprotec_5_7um85:cp300
-
cpe:2.3:h:siemens:siprotec_5_7ut82:cp100
-
cpe:2.3:h:siemens:siprotec_5_7ut82:cp150
-
cpe:2.3:h:siemens:siprotec_5_7ut85:cp200
-
cpe:2.3:h:siemens:siprotec_5_7ut85:cp300
-
cpe:2.3:h:siemens:siprotec_5_7ut86:cp200
-
cpe:2.3:h:siemens:siprotec_5_7ut86:cp300
-
cpe:2.3:h:siemens:siprotec_5_7ut87:cp200
-
cpe:2.3:h:siemens:siprotec_5_7ut87:cp300
-
cpe:2.3:h:siemens:siprotec_5_7ve85:cp300
-
cpe:2.3:h:siemens:siprotec_5_7vk87:cp200
-
cpe:2.3:h:siemens:siprotec_5_7vk87:cp300
-
cpe:2.3:h:siemens:siprotec_5_communication_module_ethba2el:-
-
cpe:2.3:h:siemens:siprotec_5_communication_module_ethbb2fo:-
-
cpe:2.3:h:siemens:siprotec_5_communication_module_ethbd2fo:-
-
cpe:2.3:h:siemens:siprotec_5_compact_7sx800:cp050
-
cpe:2.3:o:siemens:siprotec_5_6md85_firmware:-
-
cpe:2.3:o:siemens:siprotec_5_6md86_firmware:-
-
cpe:2.3:o:siemens:siprotec_5_6md89_firmware:-
-
cpe:2.3:o:siemens:siprotec_5_6mu85_firmware:-
-
cpe:2.3:o:siemens:siprotec_5_7ke85_firmware:-
-
cpe:2.3:o:siemens:siprotec_5_7sa82_firmware:-
-
cpe:2.3:o:siemens:siprotec_5_7sa86_firmware:-
-
cpe:2.3:o:siemens:siprotec_5_7sa87_firmware:-
-
cpe:2.3:o:siemens:siprotec_5_7sd82_firmware:-
-
cpe:2.3:o:siemens:siprotec_5_7sd86_firmware:-
-
cpe:2.3:o:siemens:siprotec_5_7sd87_firmware:-
-
cpe:2.3:o:siemens:siprotec_5_7sj81_firmware:-
-
cpe:2.3:o:siemens:siprotec_5_7sj82_firmware:-
-
cpe:2.3:o:siemens:siprotec_5_7sj85_firmware:-
-
cpe:2.3:o:siemens:siprotec_5_7sj86_firmware:-
-
cpe:2.3:o:siemens:siprotec_5_7sk82_firmware:-
-
cpe:2.3:o:siemens:siprotec_5_7sk85_firmware:-
-
cpe:2.3:o:siemens:siprotec_5_7sl82_firmware:-
-
cpe:2.3:o:siemens:siprotec_5_7sl86_firmware:-
-
cpe:2.3:o:siemens:siprotec_5_7sl87_firmware:-
-
cpe:2.3:o:siemens:siprotec_5_7ss85_firmware:-
-
cpe:2.3:o:siemens:siprotec_5_7st85_firmware:-
-
cpe:2.3:o:siemens:siprotec_5_7sx85_firmware:-
-
cpe:2.3:o:siemens:siprotec_5_7um85_firmware:-
-
cpe:2.3:o:siemens:siprotec_5_7ut82_firmware:-
-
cpe:2.3:o:siemens:siprotec_5_7ut85_firmware:-
-
cpe:2.3:o:siemens:siprotec_5_7ut86_firmware:-
-
cpe:2.3:o:siemens:siprotec_5_7ut87_firmware:-
-
cpe:2.3:o:siemens:siprotec_5_7ve85_firmware:-
-
cpe:2.3:o:siemens:siprotec_5_7vk87_firmware:-
-
cpe:2.3:o:siemens:siprotec_5_communication_module_ethba2el_firmware:-
-
cpe:2.3:o:siemens:siprotec_5_communication_module_ethbb2fo_firmware:-
-
cpe:2.3:o:siemens:siprotec_5_communication_module_ethbd2fo_firmware:-
-
cpe:2.3:o:siemens:siprotec_5_compact_7sx800_firmware:-