SIPROTEC 5: Authenticated File Upload via DIGSI 5 Enables RCE
CVE-2025-40808 Published on June 9, 2026

A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions), SIPROTEC 5 6MD85 (CP200) (All versions), SIPROTEC 5 6MD85 (CP300) (All versions), SIPROTEC 5 6MD86 (CP200) (All versions), SIPROTEC 5 6MD86 (CP300) (All versions), SIPROTEC 5 6MD89 (CP300) (All versions), SIPROTEC 5 6MU85 (CP300) (All versions), SIPROTEC 5 7KE85 (CP200) (All versions), SIPROTEC 5 7KE85 (CP300) (All versions), SIPROTEC 5 7SA82 (CP100) (All versions), SIPROTEC 5 7SA82 (CP150) (All versions), SIPROTEC 5 7SA86 (CP200) (All versions), SIPROTEC 5 7SA86 (CP300) (All versions), SIPROTEC 5 7SA87 (CP200) (All versions), SIPROTEC 5 7SA87 (CP300) (All versions), SIPROTEC 5 7SD82 (CP100) (All versions), SIPROTEC 5 7SD82 (CP150) (All versions), SIPROTEC 5 7SD86 (CP200) (All versions), SIPROTEC 5 7SD86 (CP300) (All versions), SIPROTEC 5 7SD87 (CP200) (All versions), SIPROTEC 5 7SD87 (CP300) (All versions), SIPROTEC 5 7SJ81 (CP100) (All versions), SIPROTEC 5 7SJ81 (CP150) (All versions), SIPROTEC 5 7SJ82 (CP100) (All versions), SIPROTEC 5 7SJ82 (CP150) (All versions), SIPROTEC 5 7SJ85 (CP200) (All versions), SIPROTEC 5 7SJ85 (CP300) (All versions), SIPROTEC 5 7SJ86 (CP200) (All versions), SIPROTEC 5 7SJ86 (CP300) (All versions), SIPROTEC 5 7SK82 (CP100) (All versions), SIPROTEC 5 7SK82 (CP150) (All versions), SIPROTEC 5 7SK85 (CP200) (All versions), SIPROTEC 5 7SK85 (CP300) (All versions), SIPROTEC 5 7SL82 (CP100) (All versions), SIPROTEC 5 7SL82 (CP150) (All versions), SIPROTEC 5 7SL86 (CP200) (All versions), SIPROTEC 5 7SL86 (CP300) (All versions), SIPROTEC 5 7SL87 (CP200) (All versions), SIPROTEC 5 7SL87 (CP300) (All versions), SIPROTEC 5 7SS85 (CP200) (All versions), SIPROTEC 5 7SS85 (CP300) (All versions), SIPROTEC 5 7ST85 (CP200) (All versions), SIPROTEC 5 7ST85 (CP300) (All versions), SIPROTEC 5 7ST86 (CP300) (All versions), SIPROTEC 5 7SX82 (CP150) (All versions), SIPROTEC 5 7SX85 (CP300) (All versions), SIPROTEC 5 7SY82 (CP150) (All versions), SIPROTEC 5 7UM85 (CP300) (All versions), SIPROTEC 5 7UT82 (CP100) (All versions), SIPROTEC 5 7UT82 (CP150) (All versions), SIPROTEC 5 7UT85 (CP200) (All versions), SIPROTEC 5 7UT85 (CP300) (All versions), SIPROTEC 5 7UT86 (CP200) (All versions), SIPROTEC 5 7UT86 (CP300) (All versions), SIPROTEC 5 7UT87 (CP200) (All versions), SIPROTEC 5 7UT87 (CP300) (All versions), SIPROTEC 5 7VE85 (CP300) (All versions), SIPROTEC 5 7VK87 (CP200) (All versions), SIPROTEC 5 7VK87 (CP300) (All versions), SIPROTEC 5 7VU85 (CP300) (All versions), SIPROTEC 5 Compact 7SX800 (CP050) (All versions). The affected application allows authenticated users to upload arbitrary files using DIGSI 5 protocol. This could allow an attacker to upload malicious configuration files, that could cause denial of service condition and potentially lead to code execution.

NVD

Weakness Type

What is an Unrestricted File Upload Vulnerability?

The software allows the attacker to upload or transfer files of dangerous types that can be automatically processed within the product's environment.

CVE-2025-40808 has been classified to as an Unrestricted File Upload vulnerability or weakness.

Affected Versions

Siemens SIPROTEC 5 6MD84 (CP300):

Before * is affected.

Siemens SIPROTEC 5 6MD85 (CP200):

Before * is affected.

Siemens SIPROTEC 5 6MD85 (CP300):

Before * is affected.

Siemens SIPROTEC 5 6MD86 (CP200):

Before * is affected.

Siemens SIPROTEC 5 6MD86 (CP300):

Before * is affected.

Siemens SIPROTEC 5 6MD89 (CP300):

Before * is affected.

Siemens SIPROTEC 5 6MU85 (CP300):

Before * is affected.

Siemens SIPROTEC 5 7KE85 (CP200):

Before * is affected.

Siemens SIPROTEC 5 7KE85 (CP300):

Before * is affected.

Siemens SIPROTEC 5 7SA82 (CP100):

Before * is affected.

Siemens SIPROTEC 5 7SA82 (CP150):

Before * is affected.

Siemens SIPROTEC 5 7SA86 (CP200):

Before * is affected.

Siemens SIPROTEC 5 7SA86 (CP300):

Before * is affected.

Siemens SIPROTEC 5 7SA87 (CP200):

Before * is affected.

Siemens SIPROTEC 5 7SA87 (CP300):

Before * is affected.

Siemens SIPROTEC 5 7SD82 (CP100):

Before * is affected.

Siemens SIPROTEC 5 7SD82 (CP150):

Before * is affected.

Siemens SIPROTEC 5 7SD86 (CP200):

Before * is affected.

Siemens SIPROTEC 5 7SD86 (CP300):

Before * is affected.

Siemens SIPROTEC 5 7SD87 (CP200):

Before * is affected.

Siemens SIPROTEC 5 7SD87 (CP300):

Before * is affected.

Siemens SIPROTEC 5 7SJ81 (CP100):

Before * is affected.

Siemens SIPROTEC 5 7SJ81 (CP150):

Before * is affected.

Siemens SIPROTEC 5 7SJ82 (CP100):

Before * is affected.

Siemens SIPROTEC 5 7SJ82 (CP150):

Before * is affected.

Siemens SIPROTEC 5 7SJ85 (CP200):

Before * is affected.

Siemens SIPROTEC 5 7SJ85 (CP300):

Before * is affected.

Siemens SIPROTEC 5 7SJ86 (CP200):

Before * is affected.

Siemens SIPROTEC 5 7SJ86 (CP300):

Before * is affected.

Siemens SIPROTEC 5 7SK82 (CP100):

Before * is affected.

Siemens SIPROTEC 5 7SK82 (CP150):

Before * is affected.

Siemens SIPROTEC 5 7SK85 (CP200):

Before * is affected.

Siemens SIPROTEC 5 7SK85 (CP300):

Before * is affected.

Siemens SIPROTEC 5 7SL82 (CP100):

Before * is affected.

Siemens SIPROTEC 5 7SL82 (CP150):

Before * is affected.

Siemens SIPROTEC 5 7SL86 (CP200):

Before * is affected.

Siemens SIPROTEC 5 7SL86 (CP300):

Before * is affected.

Siemens SIPROTEC 5 7SL87 (CP200):

Before * is affected.

Siemens SIPROTEC 5 7SL87 (CP300):

Before * is affected.

Siemens SIPROTEC 5 7SS85 (CP200):

Before * is affected.

Siemens SIPROTEC 5 7SS85 (CP300):

Before * is affected.

Siemens SIPROTEC 5 7ST85 (CP200):

Before * is affected.

Siemens SIPROTEC 5 7ST85 (CP300):

Before * is affected.

Siemens SIPROTEC 5 7ST86 (CP300):

Before * is affected.

Siemens SIPROTEC 5 7SX82 (CP150):

Before * is affected.

Siemens SIPROTEC 5 7SX85 (CP300):

Before * is affected.

Siemens SIPROTEC 5 7SY82 (CP150):

Before * is affected.

Siemens SIPROTEC 5 7UM85 (CP300):

Before * is affected.

Siemens SIPROTEC 5 7UT82 (CP100):

Before * is affected.

Siemens SIPROTEC 5 7UT82 (CP150):

Before * is affected.

Siemens SIPROTEC 5 7UT85 (CP200):

Before * is affected.

Siemens SIPROTEC 5 7UT85 (CP300):

Before * is affected.

Siemens SIPROTEC 5 7UT86 (CP200):

Before * is affected.

Siemens SIPROTEC 5 7UT86 (CP300):

Before * is affected.

Siemens SIPROTEC 5 7UT87 (CP200):

Before * is affected.

Siemens SIPROTEC 5 7UT87 (CP300):

Before * is affected.

Siemens SIPROTEC 5 7VE85 (CP300):

Before * is affected.

Siemens SIPROTEC 5 7VK87 (CP200):

Before * is affected.

Siemens SIPROTEC 5 7VK87 (CP300):

Before * is affected.

Siemens SIPROTEC 5 7VU85 (CP300):

Before * is affected.

Siemens SIPROTEC 5 Compact 7SX800 (CP050):

Before * is affected.

SIPROTEC 5: Authenticated File Upload via DIGSI 5 Enables RCECVE-2025-40808 Published on June 9, 2026

Weakness Type

What is an Unrestricted File Upload Vulnerability?

Affected Versions

SIPROTEC 5: Authenticated File Upload via DIGSI 5 Enables RCE
CVE-2025-40808 Published on June 9, 2026