CVE:CVE-2023-28766
CNNVD:CNNVD-202304-720
Siemens SIPROTEC 5是德国西门子（Siemens）公司的一款多功能继电器。
Siemens SIPROTEC 5 存在代码问题漏洞，该漏洞源于缺乏对托管 Web 服务的 http 请求参数的正确验证，攻击者利用该漏洞可以发送特制的数据包，这可能会导致目标设备出现拒绝服务的情况，以下产品和版本受到影响：SIPROTEC 5 6MD85 (CP200)（所有版本）、SIPROTEC 5 6MD85 (CP300)（V9.40 之前版本）、SIPROTEC 5 6MD86 (CP200)（所有版本）、SIPROTEC 5 6MD86 (CP300) （V9.40之前版本）等。
solution:Upgrade siemens siprotec_5_6md85_firmware to a higher version than *,9.40,and avoid the version (,9.40); Upgrade siemens siprotec_5_6md86_firmware to a higher version than *,9.40,and avoid the version (,9.40); Upgrade siemens siprotec_5_6md89_firmware to a higher version than *; Upgrade siemens siprotec_5_6mu85_firmware to a higher version than 9.40,and avoid the version (,9.40); Upgrade siemens siprotec_5_7ke85_firmware to a higher version than *,9.40,and avoid the version (,9.40); Upgrade siemens siprotec_5_7sa82_firmware to a higher version than *,9.40,and avoid the version (,9.40); Upgrade siemens siprotec_5_7sa86_firmware to a higher version than *,9.40,and avoid the version (,9.40); Upgrade siemens siprotec_5_7sa87_firmware to a higher version than *,9.40,and avoid the version (,9.40); Upgrade siemens siprotec_5_7sd82_firmware to a higher version than *,9.40,and avoid the version (,9.40); Upgrade siemens siprotec_5_7sd86_firmware to a higher version than *,9.40,and avoid the version (,9.40); Upgrade siemens siprotec_5_7sd87_firmware to a higher version than *,9.40,and avoid the version (,9.40); Upgrade siemens siprotec_5_7sj81_firmware to a higher version than *,9.40,and avoid the version (,9.40); Upgrade siemens siprotec_5_7sj82_firmware to a higher version than *,9.40,and avoid the version (,9.40); Upgrade siemens siprotec_5_7sj85_firmware to a higher version than *,9.40,and avoid the version (,9.40); Upgrade siemens siprotec_5_7sj86_firmware to a higher version than *,9.40,and avoid the version (,9.40); Upgrade siemens siprotec_5_7sk82_firmware to a higher version than *,9.40,and avoid the version (,9.40); Upgrade siemens siprotec_5_7sk85_firmware to a higher version than *,9.40,and avoid the version (,9.40); Upgrade siemens siprotec_5_7sl82_firmware to a higher version than *,9.40,and avoid the version (,9.40); Upgrade siemens siprotec_5_7sl86_firmware to a higher version than *,9.40,and avoid the version (,9.40); Upgrade siemens siprotec_5_7sl87_firmware to a higher version than *,9.40,and avoid the version (,9.40); Upgrade siemens siprotec_5_7ss85_firmware to a higher version than *,9.40,and avoid the version (,9.40); Upgrade siemens siprotec_5_7st85_firmware to a higher version than *; Upgrade siemens siprotec_5_7sx85_firmware to a higher version than 9.40,and avoid the version (,9.40); Upgrade siemens siprotec_5_7um85_firmware to a higher version than 9.40,and avoid the version (,9.40); Upgrade siemens siprotec_5_7ut82_firmware to a higher version than *,9.40,and avoid the version (,9.40); Upgrade siemens siprotec_5_7ut85_firmware to a higher version than *,9.40,and avoid the version (,9.40); Upgrade siemens siprotec_5_7ut86_firmware to a higher version than *,9.40,and avoid the version (,9.40); Upgrade siemens siprotec_5_7ut87_firmware to a higher version than *,9.40,and avoid the version (,9.40); Upgrade siemens siprotec_5_7ve85_firmware to a higher version than 9.40,and avoid the version (,9.40); Upgrade siemens siprotec_5_7vk87_firmware to a higher version than *,9.40,and avoid the version (,9.40); Upgrade siemens siprotec_5_communication_module_ethba2el_firmware to a higher version than 9.40,and avoid the version (,9.40); Upgrade siemens siprotec_5_communication_module_ethbb2fo_firmware to a higher version than 9.40,and avoid the version (,9.40); Upgrade siemens siprotec_5_communication_module_ethbd2fo_firmware to a higher version than 9.40,and avoid the version (,9.40); Upgrade siemens siprotec_5_compact_7sx800_firmware to a higher version than 9.40,and avoid the version (,9.40); Upgrade siemens siprotec_5_7sa84_firmware to a higher version than *; Upgrade siemens siprotec_5_7sd84_firmware to a higher version than *; Upgrade siemens siprotec_5_7st86_firmware to a higher version than *; Upgrade siemens siprotec_5_7sx82_firmware to a higher version than 9.40,and avoid the version (,9.40); Upgrade siemens siprotec_5_7vu85_firmware to a higher version than 9.40,and avoid the version (,9.40)