CVE-2024-54017
View CSAF Summary The SIPROTEC 5 devices do not use sufficiently random numbers to generate session identifiers. This could facilitate a brute-force attack against a valid session identifier which ...
Affects 0 products across 2 vendors.
Siemens SIPROTEC 5 devices are vulnerable to session hijacking due to insufficient randomness in session identifier generation, which could be exploited by an unauthenticated remote attacker.
BSID: BS-2026-GLOBAL-221464-M • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: MEDIUM
Is this CVE in your environment?
BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.
Check My Environment →What is CVE-2024-54017?
What is the CVSS score for CVE-2024-54017?
Is CVE-2024-54017 actively exploited?
How do I remediate CVE-2024-54017?
What systems are affected by CVE-2024-54017?
| CVE ID | CVE-2024-54017 |
|---|---|
| BSID | BS-2026-GLOBAL-221464-M BreachSpider Global ID |
| CVSS Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N |
| Published | 2026-05-14 |
| Last Modified | 2026-05-14 |
| ICS Relevance | 55% |
| Weakness (CWE) | |
| Verticals | |
| Source | NVD |
View CSAF Summary The SIPROTEC 5 devices do not use sufficiently random numbers to generate session identifiers. This could facilitate a brute-force attack against a valid session identifier which could allow an unauthenticated remote attacker to hijack a valid user session. The affected session identifiers are only used in a subset of the endpoints that are provided by the affected products. Siemens is preparing fix versions and recommends countermeasures for products where fixes are not, or no
Source: NIST NVD / MITRE CVE Database
An attacker could perform a brute-force attack to guess valid session identifiers, potentially hijacking a user session. This attack is possible due to the predictable nature of the session identifiers.
Exploitation Likelihood: MEDIUM
| Vendor | Product | Fixed Version |
|---|---|---|
| Fujitsu-Siemens | — | — |
| Siemens | — | — |
No patch URL on record. Monitor vendor security advisories directly.
| CISA KEV | Not in KEV catalog |
|---|---|
| Public Exploit | Not confirmed |
| PoC Code | Not confirmed |
SAGE Enrichment Record — provenance & audit hash
| Model | /workspace/models/qwen2.5-coder-32b-instruct-bf16 |
|---|---|
| Confidence | MEDIUM |
| Enriched At | 2026-05-24 |
| SHA-512 Audit Hash | a9e20230628595ad35332acfa6be677725751fdcc1f7f91898fad5b124427b7dcea603f402bbeaa18697d4b265fd162b3913958adaaabdc303bcbfeda0685706 |
ICS/OT Vulnerability Intelligence for Your Environment
BreachSpider monitors 353,228 CVEs across ICS/OT vendors. SAGE-enriched alerts with virtual patches, NERC-CIP mapping, and PSIRT contacts delivered to your SIEM in minutes.
Join free →