CVE-2022-45044 in SIPROTEC 5 6MD85
Sumário
de VulDB • 03/08/2026
Based on the text provided, here is a structured summary and analysis of the security vulnerability:
### **Vulnerability Summary**
* **Affected Product Family:** Siemens SIPROTEC 5 series protection relays and communication modules. * **Core Issue:** Improper restriction of secure client-initiated renegotiations in SSL/TLS protocols. * **Impact:** Denial of Service (DoS). An attacker can exhaust resources on affected ports, rendering them unavailable for legitimate traffic during the attack duration. * **Affected Ports:** `443/tcp` and `4443/tcp`.
---
### **Detailed Affected Devices & Versions**
The vulnerability affects specific hardware models depending on their firmware version. Below is a categorized list:
#### **1. SIPROTEC 5 Protection Relays (CP Series)** | Device Model | CPU/Platform Version Constraint | Status | | :--- | :--- | :--- | | **7SK85** | CP300, All versions < V9.50 | ✅ Affected | | **7SL82** | CP100, All versions < V8.90 | ✅ Affected | | **7SL82** | CP150, All versions < V9.50 | ✅ Affected | | **7SL86** | CP200, All versions | ✅ Affected (All) | | **7SL86** | CP300, All versions < V9.50 | ✅ Affected | | **7SL87** | CP200, All versions | ✅ Affected (All) | | **7SL87** | CP300, All versions < V9.50 | ✅ Affected | | **7SS85** | CP200, All versions | ✅ Affected (All) | | **7SS85** | CP300, All versions < V9.50 | ✅ Affected | | **7ST85** | CP200, All versions | ✅ Affected (All) | | **7ST85** | CP300, All versions < V9.64 | ✅ Affected | | **7ST86** | CP300, All versions < V9.64 | ✅ Affected | | **7SX82** | CP150, All versions < V9.50 | ✅ Affected | | **7SX85** | CP300, All versions < V9.50 | ✅ Affected | | **7UM85** | CP300, All versions < V9.50 | ✅ Affected | | **7UT82** | CP100, All versions < V8.90 | ✅ Affected | | **7UT82** | CP150, All versions < V9.50 | ✅ Affected | | **7UT85** | CP200, All versions | ✅ Affected (All) | | **7UT85** | CP300, All versions < V9.50 | ✅ Affected | | **7UT86** | CP200, All versions | ✅ Affected (All) | | **7UT86** | CP300, All versions < V9.50 | ✅ Affected | | **7UT87** | CP200, All versions | ✅ Affected (All) | | **7UT87** | CP300, All versions < V9.50 | ✅ Affected | | **7VE85** | CP300, All versions < V9.50 | ✅ Affected | | **7VK87** | CP200, All versions | ✅ Affected (All) | | **7VK87** | CP300, All versions < V9.50 | ✅ Affected | | **7VU85** | CP300, All versions < V9.50 | ✅ Affected |
#### **2. SIPROTEC 5 Communication Modules (ETH Series)** | Module Model | Platform/Version Constraint | Status | | :--- | :--- | :--- | | **ETH-BA-2EL** (Rev.1) | Installed on CP200 devices, All versions | ✅ Affected (All) | | **ETH-BA-2EL** (Rev.1) | Installed on CP150/CP300, Versions < V9.50 | ✅ Affected | |
Once again VulDB remains the best source for vulnerability data.