{"id":"CVE-2025-40742","aliases":["EUVD-2025-20427","GHSA-2qhm-4w63-5pph"],"status":"published","title":"A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions), SIPROTEC 5 6MD85 ...","description":"A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions \u003c V11.0), SIPROTEC 5 6MD85 (CP300) (All versions \u003c V11.0), SIPROTEC 5 6MD86 (CP300) (All versions \u003c V11.0), SIPROTEC 5 6MD89 (CP300) (All versions \u003c V11.0), SIPROTEC 5 6MD89 (CP300) V9.6x (All versions \u003c V11.0), SIPROTEC 5 6MU85 (CP300) (All versions \u003c V11.0), SIPROTEC 5 7KE85 (CP300) (All versions \u003c V11.0), SIPROTEC 5 7SA82 (CP100) (All versions \u003c V8.91), SIPROTEC 5 7SA82 (CP150) (All versions \u003c V11.0), SIPROTEC 5 7SA86 (CP300) (All versions \u003c V11.0), SIPROTEC 5 7SA87 (CP300) (All versions \u003c V11.0), SIPROTEC 5 7SD82 (CP100) (All versions \u003c V8.91), SIPROTEC 5 7SD82 (CP150) (All versions \u003c V11.0), SIPROTEC 5 7SD86 (CP300) (All versions \u003c V11.0), SIPROTEC 5 7SD87 (CP300) (All versions \u003c V11.0), SIPROTEC 5 7SJ81 (CP100) (All versions \u003c V8.91), SIPROTEC 5 7SJ81 (CP150) (All versions \u003c V11.0), SIPROTEC 5 7SJ82 (CP100) (All versions \u003c V8.91), SIPROTEC 5 7SJ82 (CP150) (All versions \u003c V11.0), SIPROTEC 5 7SJ85 (CP300) (All versions \u003c V11.0), SIPROTEC 5 7SJ86 (CP300) (All versions \u003c V11.0), SIPROTEC 5 7SK82 (CP100) (All versions \u003c V8.91), SIPROTEC 5 7SK82 (CP150) (All versions \u003c V11.0), SIPROTEC 5 7SK85 (CP300) (All versions \u003c V11.0), SIPROTEC 5 7SL82 (CP100) (All versions \u003c V8.91), SIPROTEC 5 7SL82 (CP150) (All versions \u003c V11.0), SIPROTEC 5 7SL86 (CP300) (All versions \u003c V11.0), SIPROTEC 5 7SL87 (CP300) (All versions \u003c V11.0), SIPROTEC 5 7SS85 (CP300) (All versions \u003c V11.0), SIPROTEC 5 7ST85 (CP300) (All versions \u003c V11.0), SIPROTEC 5 7ST86 (CP300) (All versions \u003c V11.0), SIPROTEC 5 7SX82 (CP150) (All versions \u003c V11.0), SIPROTEC 5 7SX85 (CP300) (All versions \u003c V11.0), SIPROTEC 5 7SY82 (CP150) (All versions \u003c V11.0), SIPROTEC 5 7UM85 (CP300) (All versions \u003c V11.0), SIPROTEC 5 7UT82 (CP100) (All versions \u003c V8.91), SIPROTEC 5 7UT82 (CP150) (All versions \u003c V11.0), SIPROTEC 5 7UT85 (CP300) (All versions \u003c V11.0), SIPROTEC 5 7UT86 (CP300) (All versions \u003c V11.0), SIPROTEC 5 7UT87 (CP300) (All versions \u003c V11.0), SIPROTEC 5 7VE85 (CP300) (All versions \u003c V11.0), SIPROTEC 5 7VK87 (CP300) (All versions \u003c V11.0), SIPROTEC 5 7VU85 (CP300) (All versions \u003c V11.0), SIPROTEC 5 Compact 7SX800 (CP050) (All versions \u003c V11.0). The affected devices include session identifiers in URL requests for certain functionalities. This could allow an attacker to retrieve sensitive session data from browser history, logs, or other storage mechanisms, potentially leading to unauthorized access.","severity":{"version":"4.0","score":6,"vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00323,"percentile":0.25512,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-598"],"published":"2025-07-08T10:35:02Z","modified":"2026-11-10T11:30:29Z","products":[{"vendor":"siemens","product":"siprotec 5 6md84 (cp300)"},{"vendor":"siemens","product":"siprotec 5 6md85 (cp200)"},{"vendor":"siemens","product":"siprotec 5 6md85 (cp300)"},{"vendor":"siemens","product":"siprotec 5 6md86 (cp200)"},{"vendor":"siemens","product":"siprotec 5 6md86 (cp300)"},{"vendor":"siemens","product":"siprotec 5 6md89 (cp300)"},{"vendor":"siemens","product":"siprotec 5 6md89 (cp300) v9.6x"},{"vendor":"siemens","product":"siprotec 5 6mu85 (cp300)"},{"vendor":"siemens","product":"siprotec 5 7ke85 (cp200)"},{"vendor":"siemens","product":"siprotec 5 7ke85 (cp300)"},{"vendor":"siemens","product":"siprotec 5 7sa82 (cp100)"},{"vendor":"siemens","product":"siprotec 5 7sa82 (cp150)"},{"vendor":"siemens","product":"siprotec 5 7sa84 (cp200)"},{"vendor":"siemens","product":"siprotec 5 7sa86 (cp200)"},{"vendor":"siemens","product":"siprotec 5 7sa86 (cp300)"},{"vendor":"siemens","product":"siprotec 5 7sa87 (cp200)"},{"vendor":"siemens","product":"siprotec 5 7sa87 (cp300)"},{"vendor":"siemens","product":"siprotec 5 7sd82 (cp100)"},{"vendor":"siemens","product":"siprotec 5 7sd82 (cp150)"},{"vendor":"siemens","product":"siprotec 5 7sd84 (cp200)"},{"vendor":"siemens","product":"siprotec 5 7sd86 (cp200)"},{"vendor":"siemens","product":"siprotec 5 7sd86 (cp300)"},{"vendor":"siemens","product":"siprotec 5 7sd87 (cp200)"},{"vendor":"siemens","product":"siprotec 5 7sd87 (cp300)"},{"vendor":"siemens","product":"siprotec 5 7sj81 (cp100)"},{"vendor":"siemens","product":"siprotec 5 7sj81 (cp150)"},{"vendor":"siemens","product":"siprotec 5 7sj82 (cp100)"},{"vendor":"siemens","product":"siprotec 5 7sj82 (cp150)"},{"vendor":"siemens","product":"siprotec 5 7sj85 (cp200)"},{"vendor":"siemens","product":"siprotec 5 7sj85 (cp300)"},{"vendor":"siemens","product":"siprotec 5 7sj86 (cp200)"},{"vendor":"siemens","product":"siprotec 5 7sj86 (cp300)"},{"vendor":"siemens","product":"siprotec 5 7sk82 (cp100)"},{"vendor":"siemens","product":"siprotec 5 7sk82 (cp150)"},{"vendor":"siemens","product":"siprotec 5 7sk85 (cp200)"},{"vendor":"siemens","product":"siprotec 5 7sk85 (cp300)"},{"vendor":"siemens","product":"siprotec 5 7sl82 (cp100)"},{"vendor":"siemens","product":"siprotec 5 7sl82 (cp150)"},{"vendor":"siemens","product":"siprotec 5 7sl86 (cp200)"},{"vendor":"siemens","product":"siprotec 5 7sl86 (cp300)"},{"vendor":"siemens","product":"siprotec 5 7sl87 (cp200)"},{"vendor":"siemens","product":"siprotec 5 7sl87 (cp300)"},{"vendor":"siemens","product":"siprotec 5 7ss85 (cp200)"},{"vendor":"siemens","product":"siprotec 5 7ss85 (cp300)"},{"vendor":"siemens","product":"siprotec 5 7st85 (cp200)"},{"vendor":"siemens","product":"siprotec 5 7st85 (cp300)"},{"vendor":"siemens","product":"siprotec 5 7st86 (cp300)"},{"vendor":"siemens","product":"siprotec 5 7sx82 (cp150)"},{"vendor":"siemens","product":"siprotec 5 7sx85 (cp300)"},{"vendor":"siemens","product":"siprotec 5 7sy82 (cp150)"},{"vendor":"siemens","product":"siprotec 5 7um85 (cp300)"},{"vendor":"siemens","product":"siprotec 5 7ut82 (cp100)"},{"vendor":"siemens","product":"siprotec 5 7ut82 (cp150)"},{"vendor":"siemens","product":"siprotec 5 7ut85 (cp200)"},{"vendor":"siemens","product":"siprotec 5 7ut85 (cp300)"},{"vendor":"siemens","product":"siprotec 5 7ut86 (cp200)"},{"vendor":"siemens","product":"siprotec 5 7ut86 (cp300)"},{"vendor":"siemens","product":"siprotec 5 7ut87 (cp200)"},{"vendor":"siemens","product":"siprotec 5 7ut87 (cp300)"},{"vendor":"siemens","product":"siprotec 5 7ve85 (cp300)"},{"vendor":"siemens","product":"siprotec 5 7vk87 (cp200)"},{"vendor":"siemens","product":"siprotec 5 7vk87 (cp300)"},{"vendor":"siemens","product":"siprotec 5 7vu85 (cp300)"},{"vendor":"siemens","product":"siprotec 5 compact 7sx800 (cp050)"}],"references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-904646.html"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-40742"},{"url":"https://github.com/advisories/GHSA-2qhm-4w63-5pph"}],"sources":{"cve":[{"id":"CVE-2025-40742","description":"A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions \u003c V11.0), SIPROTEC 5 6MD85 (CP300) (All versions \u003c V11.0), SIPROTEC 5 6MD86 (CP300) (All versions \u003c V11.0), SIPROTEC 5 6MD89 (CP300) (All versions \u003c V11.0), SIPROTEC 5 6MD89 (CP300) V9.6x (All versions \u003c V11.0), SIPROTEC 5 6MU85 (CP300) (All versions \u003c V11.0), SIPROTEC 5 7KE85 (CP300) (All versions \u003c V11.0), SIPROTEC 5 7SA82 (CP100) (All versions \u003c V8.91), SIPROTEC 5 7SA82 (CP150) (All versions \u003c V11.0), SIPROTEC 5 7SA86 (CP300) (All versions \u003c V11.0), SIPROTEC 5 7SA87 (CP300) (All versions \u003c V11.0), SIPROTEC 5 7SD82 (CP100) (All versions \u003c V8.91), SIPROTEC 5 7SD82 (CP150) (All versions \u003c V11.0), SIPROTEC 5 7SD86 (CP300) (All versions \u003c V11.0), SIPROTEC 5 7SD87 (CP300) (All versions \u003c V11.0), SIPROTEC 5 7SJ81 (CP100) (All versions \u003c V8.91), SIPROTEC 5 7SJ81 (CP150) (All versions \u003c V11.0), SIPROTEC 5 7SJ82 (CP100) (All versions \u003c V8.91), SIPROTEC 5 7SJ82 (CP150) (All versions \u003c V11.0), SIPROTEC 5 7SJ85 (CP300) (All versions \u003c V11.0), SIPROTEC 5 7SJ86 (CP300) (All versions \u003c V11.0), SIPROTEC 5 7SK82 (CP100) (All versions \u003c V8.91), SIPROTEC 5 7SK82 (CP150) (All versions \u003c V11.0), SIPROTEC 5 7SK85 (CP300) (All versions \u003c V11.0), SIPROTEC 5 7SL82 (CP100) (All versions \u003c V8.91), SIPROTEC 5 7SL82 (CP150) (All versions \u003c V11.0), SIPROTEC 5 7SL86 (CP300) (All versions \u003c V11.0), SIPROTEC 5 7SL87 (CP300) (All versions \u003c V11.0), SIPROTEC 5 7SS85 (CP300) (All versions \u003c V11.0), SIPROTEC 5 7ST85 (CP300) (All versions \u003c V11.0), SIPROTEC 5 7ST86 (CP300) (All versions \u003c V11.0), SIPROTEC 5 7SX82 (CP150) (All versions \u003c V11.0), SIPROTEC 5 7SX85 (CP300) (All versions \u003c V11.0), SIPROTEC 5 7SY82 (CP150) (All versions \u003c V11.0), SIPROTEC 5 7UM85 (CP300) (All versions \u003c V11.0), SIPROTEC 5 7UT82 (CP100) (All versions \u003c V8.91), SIPROTEC 5 7UT82 (CP150) (All versions \u003c V11.0), SIPROTEC 5 7UT85 (CP300) (All versions \u003c V11.0), SIPROTEC 5 7UT86 (CP300) (All versions \u003c V11.0), SIPROTEC 5 7UT87 (CP300) (All versions \u003c V11.0), SIPROTEC 5 7VE85 (CP300) (All versions \u003c V11.0), SIPROTEC 5 7VK87 (CP300) (All versions \u003c V11.0), SIPROTEC 5 7VU85 (CP300) (All versions \u003c V11.0), SIPROTEC 5 Compact 7SX800 (CP050) (All versions \u003c V11.0). The affected devices include session identifiers in URL requests for certain functionalities. This could allow an attacker to retrieve sensitive session data from browser history, logs, or other storage mechanisms, potentially leading to unauthorized access.","status":"published","published":"2025-07-08T10:35:02.095Z","modified":"2026-11-10T11:30:29.217Z","cvss":[{"version":"4.0","score":6,"vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","level":"medium","assessor":"cna"},{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-598"],"updated_at":"2026-11-10T12:38:31.627777Z"}],"euvd":[{"id":"EUVD-2025-20427","description":"A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions \u003c V11.0), SIPROTEC 5 6MD85 (CP300) (All versions \u003c V11.0), SIPROTEC 5 6MD86 (CP300) (All versions \u003c V11.0), SIPROTEC 5 6MD89 (CP300) (All versions \u003c V11.0), SIPROTEC 5 6MD89 (CP300) V9.6x (All versions \u003c V11.0), SIPROTEC 5 6MU85 (CP300) (All versions \u003c V11.0), SIPROTEC 5 7KE85 (CP300) (All versions \u003c V11.0), SIPROTEC 5 7SA82 (CP100) (All versions \u003c V8.91), SIPROTEC 5 7SA82 (CP150) (All versions \u003c V11.0), SIPROTEC 5 7SA86 (CP300) (All versions \u003c V11.0), SIPROTEC 5 7SA87 (CP300) (All versions \u003c V11.0), SIPROTEC 5 7SD82 (CP100) (All versions \u003c V8.91), SIPROTEC 5 7SD82 (CP150) (All versions \u003c V11.0), SIPROTEC 5 7SD86 (CP300) (All versions \u003c V11.0), SIPROTEC 5 7SD87 (CP300) (All versions \u003c V11.0), SIPROTEC 5 7SJ81 (CP100) (All versions \u003c V8.91), SIPROTEC 5 7SJ81 (CP150) (All versions \u003c V11.0), SIPROTEC 5 7SJ82 (CP100) (All versions \u003c V8.91), SIPROTEC 5 7SJ82 (CP150) (All versions \u003c V11.0), SIPROTEC 5 7SJ85 (CP300) (All versions \u003c V11.0), SIPROTEC 5 7SJ86 (CP300) (All versions \u003c V11.0), SIPROTEC 5 7SK82 (CP100) (All versions \u003c V8.91), SIPROTEC 5 7SK82 (CP150) (All versions \u003c V11.0), SIPROTEC 5 7SK85 (CP300) (All versions \u003c V11.0), SIPROTEC 5 7SL82 (CP100) (All versions \u003c V8.91), SIPROTEC 5 7SL82 (CP150) (All versions \u003c V11.0), SIPROTEC 5 7SL86 (CP300) (All versions \u003c V11.0), SIPROTEC 5 7SL87 (CP300) (All versions \u003c V11.0), SIPROTEC 5 7SS85 (CP300) (All versions \u003c V11.0), SIPROTEC 5 7ST85 (CP300) (All versions \u003c V11.0), SIPROTEC 5 7ST86 (CP300) (All versions \u003c V11.0), SIPROTEC 5 7SX82 (CP150) (All versions \u003c V11.0), SIPROTEC 5 7SX85 (CP300) (All versions \u003c V11.0), SIPROTEC 5 7SY82 (CP150) (All versions \u003c V11.0), SIPROTEC 5 7UM85 (CP300) (All versions \u003c V11.0), SIPROTEC 5 7UT82 (CP100) (All versions \u003c V8.91), SIPROTEC 5 7UT82 (CP150) (All versions \u003c V11.0), SIPROTEC 5 7UT85 (CP300) (All versions \u003c V11.0), SIPROTEC 5 7UT86 (CP300) (All versions \u003c V11.0), SIPROTEC 5 7UT87 (CP300) (All versions \u003c V11.0), SIPROTEC 5 7VE85 (CP300) (All versions \u003c V11.0), SIPROTEC 5 7VK87 (CP300) (All versions \u003c V11.0), SIPROTEC 5 7VU85 (CP300) (All versions \u003c V11.0), SIPROTEC 5 Compact 7SX800 (CP050) (All versions \u003c V11.0). The affected devices include session identifiers in URL requests for certain functionalities. This could allow an attacker to retrieve sensitive session data from browser history, logs, or other storage mechanisms, potentially leading to unauthorized access.","status":"published","published":"2025-07-08T10:35:02Z","modified":"2026-11-10T11:30:29Z","cvss":[{"version":"4.0","score":6,"vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","level":"medium"}],"updated_at":"2026-11-10T12:20:52.279403Z"}],"ghsa":[{"id":"GHSA-2qhm-4w63-5pph","title":"A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions), SIPROTEC 5 6MD85 ...","description":"A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions), SIPROTEC 5 6MD85 (CP300) (All versions), SIPROTEC 5 6MD86 (CP300) (All versions), SIPROTEC 5 6MD89 (CP300) (All versions), SIPROTEC 5 6MD89 (CP300) V9.6 (All versions), SIPROTEC 5 6MU85 (CP300) (All versions), SIPROTEC 5 7KE85 (CP300) (All versions), SIPROTEC 5 7SA82 (CP100) (All versions), SIPROTEC 5 7SA82 (CP150) (All versions), SIPROTEC 5 7SA86 (CP300) (All versions), SIPROTEC 5 7SA87 (CP300) (All versions), SIPROTEC 5 7SD82 (CP100) (All versions), SIPROTEC 5 7SD82 (CP150) (All versions), SIPROTEC 5 7SD86 (CP300) (All versions), SIPROTEC 5 7SD87 (CP300) (All versions), SIPROTEC 5 7SJ81 (CP100) (All versions), SIPROTEC 5 7SJ81 (CP150) (All versions), SIPROTEC 5 7SJ82 (CP100) (All versions), SIPROTEC 5 7SJ82 (CP150) (All versions), SIPROTEC 5 7SJ85 (CP300) (All versions), SIPROTEC 5 7SJ86 (CP300) (All versions), SIPROTEC 5 7SK82 (CP100) (All versions), SIPROTEC 5 7SK82 (CP150) (All versions), SIPROTEC 5 7SK85 (CP300) (All versions), SIPROTEC 5 7SL82 (CP100) (All versions), SIPROTEC 5 7SL82 (CP150) (All versions), SIPROTEC 5 7SL86 (CP300) (All versions), SIPROTEC 5 7SL87 (CP300) (All versions), SIPROTEC 5 7SS85 (CP300) (All versions), SIPROTEC 5 7ST85 (CP300) (All versions), SIPROTEC 5 7ST86 (CP300) (All versions), SIPROTEC 5 7SX82 (CP150) (All versions), SIPROTEC 5 7SX85 (CP300) (All versions), SIPROTEC 5 7SY82 (CP150) (All versions), SIPROTEC 5 7UM85 (CP300) (All versions), SIPROTEC 5 7UT82 (CP100) (All versions), SIPROTEC 5 7UT82 (CP150) (All versions), SIPROTEC 5 7UT85 (CP300) (All versions), SIPROTEC 5 7UT86 (CP300) (All versions), SIPROTEC 5 7UT87 (CP300) (All versions), SIPROTEC 5 7VE85 (CP300) (All versions), SIPROTEC 5 7VK87 (CP300) (All versions), SIPROTEC 5 7VU85 (CP300) (All versions), SIPROTEC 5 Compact 7SX800 (CP050) (All versions). The affected devices include session identifiers in URL requests for certain functionalities. This could allow an attacker to retrieve sensitive session data from browser history, logs, or other storage mechanisms, potentially leading to unauthorized access.","status":"published","published":"2025-07-08T12:31:02Z","modified":"2025-07-08T12:31:09Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"},{"version":"4.0","score":6,"vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium"}],"cwes":["CWE-598"],"updated_at":"2026-11-02T15:02:56.619633Z"}],"nvd":[{"id":"CVE-2025-40742","description":"A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions \u003c V11.0), SIPROTEC 5 6MD85 (CP300) (All versions \u003c V11.0), SIPROTEC 5 6MD86 (CP300) (All versions \u003c V11.0), SIPROTEC 5 6MD89 (CP300) (All versions \u003c V11.0), SIPROTEC 5 6MD89 (CP300) V9.6x (All versions \u003c V11.0), SIPROTEC 5 6MU85 (CP300) (All versions \u003c V11.0), SIPROTEC 5 7KE85 (CP300) (All versions \u003c V11.0), SIPROTEC 5 7SA82 (CP100) (All versions \u003c V8.91), SIPROTEC 5 7SA82 (CP150) (All versions \u003c V11.0), SIPROTEC 5 7SA86 (CP300) (All versions \u003c V11.0), SIPROTEC 5 7SA87 (CP300) (All versions \u003c V11.0), SIPROTEC 5 7SD82 (CP100) (All versions \u003c V8.91), SIPROTEC 5 7SD82 (CP150) (All versions \u003c V11.0), SIPROTEC 5 7SD86 (CP300) (All versions \u003c V11.0), SIPROTEC 5 7SD87 (CP300) (All versions \u003c V11.0), SIPROTEC 5 7SJ81 (CP100) (All versions \u003c V8.91), SIPROTEC 5 7SJ81 (CP150) (All versions \u003c V11.0), SIPROTEC 5 7SJ82 (CP100) (All versions \u003c V8.91), SIPROTEC 5 7SJ82 (CP150) (All versions \u003c V11.0), SIPROTEC 5 7SJ85 (CP300) (All versions \u003c V11.0), SIPROTEC 5 7SJ86 (CP300) (All versions \u003c V11.0), SIPROTEC 5 7SK82 (CP100) (All versions \u003c V8.91), SIPROTEC 5 7SK82 (CP150) (All versions \u003c V11.0), SIPROTEC 5 7SK85 (CP300) (All versions \u003c V11.0), SIPROTEC 5 7SL82 (CP100) (All versions \u003c V8.91), SIPROTEC 5 7SL82 (CP150) (All versions \u003c V11.0), SIPROTEC 5 7SL86 (CP300) (All versions \u003c V11.0), SIPROTEC 5 7SL87 (CP300) (All versions \u003c V11.0), SIPROTEC 5 7SS85 (CP300) (All versions \u003c V11.0), SIPROTEC 5 7ST85 (CP300) (All versions \u003c V11.0), SIPROTEC 5 7ST86 (CP300) (All versions \u003c V11.0), SIPROTEC 5 7SX82 (CP150) (All versions \u003c V11.0), SIPROTEC 5 7SX85 (CP300) (All versions \u003c V11.0), SIPROTEC 5 7SY82 (CP150) (All versions \u003c V11.0), SIPROTEC 5 7UM85 (CP300) (All versions \u003c V11.0), SIPROTEC 5 7UT82 (CP100) (All versions \u003c V8.91), SIPROTEC 5 7UT82 (CP150) (All versions \u003c V11.0), SIPROTEC 5 7UT85 (CP300) (All versions \u003c V11.0), SIPROTEC 5 7UT86 (CP300) (All versions \u003c V11.0), SIPROTEC 5 7UT87 (CP300) (All versions \u003c V11.0), SIPROTEC 5 7VE85 (CP300) (All versions \u003c V11.0), SIPROTEC 5 7VK87 (CP300) (All versions \u003c V11.0), SIPROTEC 5 7VU85 (CP300) (All versions \u003c V11.0), SIPROTEC 5 Compact 7SX800 (CP050) (All versions \u003c V11.0). The affected devices include session identifiers in URL requests for certain functionalities. This could allow an attacker to retrieve sensitive session data from browser history, logs, or other storage mechanisms, potentially leading to unauthorized access.","status":"published","published":"2025-07-08T11:15:30.923Z","modified":"2026-11-10T12:17:14.923Z","cvss":[{"version":"4.0","score":6,"vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium","assessor":"secondary"},{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-598"],"updated_at":"2026-11-10T14:19:23.988247Z"}]}}