Unvalidated SNMP GET Requests in SIEMENS SIPROTEC 5 Devices

CVE-2024-54015

What is CVE-2024-54015?

A security flaw in various SIEMENS SIPROTEC 5 devices has been identified where these devices fail to properly validate SNMP GET requests. An unauthenticated remote attacker can exploit this vulnerability to retrieve sensitive information by issuing SNMPv2 GET requests, potentially using default credentials. This lack of validation poses a significant risk, as it could lead to unauthorized access to critical device information, making it essential for affected users to apply the recommended mitigations swiftly.

References