ICSA-17-187-03F Siemens SIPROTEC 4 and SIPROTEC Compact (Update F)
CISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.
describes (6)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2016-7114US | high8.8OT elevated | — | ||
A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions < V1.04.01; Firmware variant Modbus TCP for EN100 Ethernet module : All… | ||||
| CVE-2016-7113US | high7.5 | — | ||
A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions < V1.04.01; Firmware variant Modbus TCP for EN100 Ethernet module : All… | ||||
| CVE-2016-7112US | critical9.8OT elevated | — | ||
A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions < V1.04.01; Firmware variant Modbus TCP for EN100 Ethernet module : All… | ||||
| CVE-2016-4785US | medium5.3OT elevated | — | ||
A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions < V1.04.01; Firmware variant Modbus TCP for EN100 Ethernet module : All… | ||||
| CVE-2016-4784US | medium5.3OT elevated | — | ||
A vulnerability has been identified in firmware variant PROFINET IO for EN100 Ethernet module : All versions < V1.04.01; Firmware variant Modbus TCP for EN100 Ethernet module : All… | ||||
| CVE-2015-5374US | high7.8 | Exploit | ||
A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions < V1.04.01; Firmware variant Modbus TCP for EN100 Ethernet module : All… | ||||
references
External citations — patches, advisories, analysis.
- SSA-323211: Vulnerabilities in SIPROTEC 4 and SIPROTEC Compact Devicesself
- ICS Advisory ICSA-17-187-03F JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-17-187-03F - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (80)
- MitigationEN100 Ethernet module included in SIPROTEC Merging Unit 6MU80
Install V1.02.02 - Download: Please contact the Siemens hotline at support.energy@siemens.com
- MitigationEN100 Ethernet module included in SIPROTEC Merging Unit 6MU80
Install V1.02.02 - Download: Please contact the Siemens hotline at support.energy@siemens.com
- MitigationEN100 Ethernet module included in SIPROTEC Merging Unit 6MU80
Install V1.02.02 - Download: Please contact the Siemens hotline at support.energy@siemens.com
- MitigationEN100 Ethernet module included in SIPROTEC Merging Unit 6MU80
Install V1.02.02 - Download: Please contact the Siemens hotline at support.energy@siemens.com
- MitigationEN100 Ethernet module included in SIPROTEC Merging Unit 6MU80
Install V1.02.02 - Download: Please contact the Siemens hotline at support.energy@siemens.com
- MitigationEN100 Ethernet module included in SIPROTEC Merging Unit 6MU80
Install V1.02.02 - Download: Please contact the Siemens hotline at support.energy@siemens.com
- MitigationFirmware variant DNP3 TCP for EN100 Ethernet module
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP
- MitigationFirmware variant DNP3 TCP for EN100 Ethernet module
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP
- MitigationFirmware variant DNP3 TCP for EN100 Ethernet module
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP
- MitigationFirmware variant DNP3 TCP for EN100 Ethernet module
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP
- MitigationFirmware variant DNP3 TCP for EN100 Ethernet module
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP
- MitigationFirmware variant DNP3 TCP for EN100 Ethernet module
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP
- MitigationFirmware variant IEC 104 for EN100 Ethernet module
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP
- MitigationFirmware variant IEC 104 for EN100 Ethernet module
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP
- MitigationFirmware variant IEC 104 for EN100 Ethernet module
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP
- MitigationFirmware variant IEC 104 for EN100 Ethernet module
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP
- MitigationFirmware variant IEC 104 for EN100 Ethernet module
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP
- MitigationFirmware variant IEC 104 for EN100 Ethernet module
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP
- MitigationFirmware variant Modbus TCP for EN100 Ethernet module
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP
- MitigationFirmware variant Modbus TCP for EN100 Ethernet module
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP
- MitigationFirmware variant Modbus TCP for EN100 Ethernet module
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP
- MitigationFirmware variant Modbus TCP for EN100 Ethernet module
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP
- MitigationFirmware variant Modbus TCP for EN100 Ethernet module
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP
- MitigationFirmware variant Modbus TCP for EN100 Ethernet module
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP
- MitigationFirmware variant PROFINET IO for EN100 Ethernet module
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP
- MitigationFirmware variant PROFINET IO for EN100 Ethernet module
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP
- MitigationFirmware variant PROFINET IO for EN100 Ethernet module
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP
- MitigationFirmware variant PROFINET IO for EN100 Ethernet module
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP
- MitigationFirmware variant PROFINET IO for EN100 Ethernet module
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP
- MitigationFirmware variant PROFINET IO for EN100 Ethernet module
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP
- MitigationSIPROTEC 7SD686
Install V 4.03 - Download: http://www.siemensenergysector.com/ProductRelatedDown.aspx?ProductId=64
- MitigationSIPROTEC 7SD686
Install V4.05 - Download: http://www.siemensenergysector.com/ProductRelatedDown.aspx?ProductId=64
- MitigationSIPROTEC 7SD686
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP
- MitigationSIPROTEC 7SD686
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP
- MitigationSIPROTEC 7SD686
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP
- MitigationSIPROTEC 7SD686
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP
- MitigationSIPROTEC 7SJ66
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP
- MitigationSIPROTEC 7SJ66
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP
- MitigationSIPROTEC 7SJ66
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP
- MitigationSIPROTEC 7SJ66
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP
- MitigationSIPROTEC 7SJ66
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP
- MitigationSIPROTEC 7SJ66
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP
- MitigationSIPROTEC 7SJ686
Install V 4.83 - Download: http://www.siemensenergysector.com/ProductRelatedDown.aspx?ProductId=51
- MitigationSIPROTEC 7SJ686
Install V 4.87 - Download: http://www.siemensenergysector.com/ProductRelatedDown.aspx?ProductId=51
- MitigationSIPROTEC 7SJ686
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP
- MitigationSIPROTEC 7SJ686
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP
- MitigationSIPROTEC 7SJ686
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP
- MitigationSIPROTEC 7SJ686
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP
- MitigationSIPROTEC 7UT686
Install V 4.01 - Download: http://www.siemensenergysector.com/ProductRelatedDown.aspx?ProductId=68
- MitigationSIPROTEC 7UT686
Install V4.02 - Download: http://www.siemensenergysector.com/ProductRelatedDown.aspx?ProductId=68
- MitigationSIPROTEC 7UT686
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP
- MitigationSIPROTEC 7UT686
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP
- MitigationSIPROTEC 7UT686
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP
- MitigationSIPROTEC 7UT686
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP
- FixedFirmware variant DNP3 TCP for EN100 Ethernet module
Install V1.03 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821
https://support.industry.siemens.com/cs/us/en/view/109745821 - FixedFirmware variant DNP3 TCP for EN100 Ethernet module
Install V1.03 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821
https://support.industry.siemens.com/cs/us/en/view/109745821 - FixedFirmware variant DNP3 TCP for EN100 Ethernet module
Install V1.03 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821
https://support.industry.siemens.com/cs/us/en/view/109745821 - FixedFirmware variant DNP3 TCP for EN100 Ethernet module
Install V1.03 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821
https://support.industry.siemens.com/cs/us/en/view/109745821 - FixedFirmware variant DNP3 TCP for EN100 Ethernet module
Install V1.03 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821
https://support.industry.siemens.com/cs/us/en/view/109745821 - FixedFirmware variant DNP3 TCP for EN100 Ethernet module
Install V1.03 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821
https://support.industry.siemens.com/cs/us/en/view/109745821 - FixedFirmware variant IEC 104 for EN100 Ethernet module
Install V1.21 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821
https://support.industry.siemens.com/cs/us/en/view/109745821 - FixedFirmware variant IEC 104 for EN100 Ethernet module
Install V1.21 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821
https://support.industry.siemens.com/cs/us/en/view/109745821 - FixedFirmware variant IEC 104 for EN100 Ethernet module
Install V1.21 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821
https://support.industry.siemens.com/cs/us/en/view/109745821 - FixedFirmware variant IEC 104 for EN100 Ethernet module
Install V1.21 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821
https://support.industry.siemens.com/cs/us/en/view/109745821 - FixedFirmware variant IEC 104 for EN100 Ethernet module
Install V1.21 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821
https://support.industry.siemens.com/cs/us/en/view/109745821 - FixedFirmware variant IEC 104 for EN100 Ethernet module
Install V1.21 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821
https://support.industry.siemens.com/cs/us/en/view/109745821 - FixedFirmware variant Modbus TCP for EN100 Ethernet module
Install V1.11.00 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821
https://support.industry.siemens.com/cs/us/en/view/109745821 - FixedFirmware variant Modbus TCP for EN100 Ethernet module
Install V1.11.00 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821
https://support.industry.siemens.com/cs/us/en/view/109745821 - FixedFirmware variant Modbus TCP for EN100 Ethernet module
Install V1.11.00 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821
https://support.industry.siemens.com/cs/us/en/view/109745821 - FixedFirmware variant Modbus TCP for EN100 Ethernet module
Install V1.11.00 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821
https://support.industry.siemens.com/cs/us/en/view/109745821 - FixedFirmware variant Modbus TCP for EN100 Ethernet module
Install V1.11.00 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821
https://support.industry.siemens.com/cs/us/en/view/109745821 - FixedFirmware variant Modbus TCP for EN100 Ethernet module
Install V1.11.00 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821
https://support.industry.siemens.com/cs/us/en/view/109745821 - FixedFirmware variant PROFINET IO for EN100 Ethernet module
Install V1.04.01 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821
https://support.industry.siemens.com/cs/us/en/view/109745821 - FixedFirmware variant PROFINET IO for EN100 Ethernet module
Install V1.04.01 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821
https://support.industry.siemens.com/cs/us/en/view/109745821 - FixedFirmware variant PROFINET IO for EN100 Ethernet module
Install V1.04.01 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821
https://support.industry.siemens.com/cs/us/en/view/109745821 - FixedFirmware variant PROFINET IO for EN100 Ethernet module
Install V1.04.01 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821
https://support.industry.siemens.com/cs/us/en/view/109745821 - FixedFirmware variant PROFINET IO for EN100 Ethernet module
Install V1.04.01 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821
https://support.industry.siemens.com/cs/us/en/view/109745821 - FixedFirmware variant PROFINET IO for EN100 Ethernet module
Install V1.04.01 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821
https://support.industry.siemens.com/cs/us/en/view/109745821 - FixedSIPROTEC 7SJ66
Install V 4.20 - Download: https://support.industry.siemens.com/cs/gb/en/view/109743555
https://support.industry.siemens.com/cs/gb/en/view/109743555 - FixedSIPROTEC 7SJ66
Install V 4.30 - Download: https://support.industry.siemens.com/cs/us/en/view/109743555
https://support.industry.siemens.com/cs/us/en/view/109743555
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan