{"id":"CVE-2021-37206","aliases":["EUVD-2021-23780","GHSA-m6hh-6w6m-5h5c"],"status":"published","title":"A vulnerability has been identified in SIPROTEC 5 relays with CPU variants CP050 (All versions \u003c...","description":"A vulnerability has been identified in SIPROTEC 5 relays with CPU variants CP050 (All versions \u003c V8.80), SIPROTEC 5 relays with CPU variants CP100 (All versions \u003c V8.80), SIPROTEC 5 relays with CPU variants CP300 (All versions \u003c V8.80). Received webpackets are not properly processed. An unauthenticated remote attacker with access to any of the Ethernet interfaces could send specially crafted packets to force a restart of the target device.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-12","score":0.01433,"percentile":0.73444,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-20"],"published":"2021-09-14T10:47:57Z","modified":"2026-06-17T04:00:16Z","products":[{"vendor":"siemens","product":"siprotec 5 relays with cpu variants cp050"},{"vendor":"siemens","product":"siprotec 5 relays with cpu variants cp100"},{"vendor":"siemens","product":"siprotec 5 relays with cpu variants cp300"},{"vendor":"siemens","product":"siprotec_5_with_cpu_variant_cp050"},{"vendor":"siemens","product":"siprotec_5_with_cpu_variant_cp100"},{"vendor":"siemens","product":"siprotec_5_with_cpu_variant_cp300"}],"references":[{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-500748.pdf","tags":["x_refsource_MISC","x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37206"},{"url":"https://github.com/advisories/GHSA-m6hh-6w6m-5h5c"}],"sources":{"cve":[{"id":"CVE-2021-37206","description":"A vulnerability has been identified in SIPROTEC 5 relays with CPU variants CP050 (All versions \u003c V8.80), SIPROTEC 5 relays with CPU variants CP100 (All versions \u003c V8.80), SIPROTEC 5 relays with CPU variants CP300 (All versions \u003c V8.80). Received webpackets are not properly processed. An unauthenticated remote attacker with access to any of the Ethernet interfaces could send specially crafted packets to force a restart of the target device.","status":"published","published":"2021-09-14T10:47:57Z","modified":"2024-08-04T01:16:03.653Z","cwes":["CWE-20"],"updated_at":"2026-11-02T14:32:58.359368Z"}],"euvd":[{"id":"EUVD-2021-23780","description":"A vulnerability has been identified in SIPROTEC 5 relays with CPU variants CP050 (All versions \u003c V8.80), SIPROTEC 5 relays with CPU variants CP100 (All versions \u003c V8.80), SIPROTEC 5 relays with CPU variants CP300 (All versions \u003c V8.80). Received webpackets are not properly processed. An unauthenticated remote attacker with access to any of the Ethernet interfaces could send specially crafted packets to force a restart of the target device.","status":"published","published":"2021-09-14T10:47:57Z","modified":"2024-08-04T01:16:03Z","updated_at":"2026-11-03T03:24:27.725787Z"}],"ghsa":[{"id":"GHSA-m6hh-6w6m-5h5c","title":"A vulnerability has been identified in SIPROTEC 5 relays with CPU variants CP050 (All versions \u003c...","description":"A vulnerability has been identified in SIPROTEC 5 relays with CPU variants CP050 (All versions \u003c V8.80), SIPROTEC 5 relays with CPU variants CP100 (All versions \u003c V8.80), SIPROTEC 5 relays with CPU variants CP200 (All versions \u003c V8.80), SIPROTEC 5 relays with CPU variants CP300 (All versions \u003c V8.80). Received webpackets are not properly processed. An unauthenticated remote attacker with access to any of the Ethernet interfaces could send specially crafted packets to force a restart of the target device.","status":"published","published":"2022-05-24T19:14:29Z","modified":"2023-01-30T05:02:13Z","cwes":["CWE-20"],"updated_at":"2026-11-02T14:46:35.666418Z"}],"nvd":[{"id":"CVE-2021-37206","description":"A vulnerability has been identified in SIPROTEC 5 relays with CPU variants CP050 (All versions \u003c V8.80), SIPROTEC 5 relays with CPU variants CP100 (All versions \u003c V8.80), SIPROTEC 5 relays with CPU variants CP300 (All versions \u003c V8.80). Received webpackets are not properly processed. An unauthenticated remote attacker with access to any of the Ethernet interfaces could send specially crafted packets to force a restart of the target device.","status":"published","published":"2021-09-14T11:15:26.547Z","modified":"2026-06-17T04:00:16.097Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:06:58.502206Z"}]}}