Siemens EN100 Ethernet Module
EN100 Ethernet module is affected by memory corruption vulnerability (CVE-2022-30938). Siemens has released an update for the EN100 Ethernet module IEC 61850 variant and recommends to update to the latest version. Siemens recommends specific countermeasures for products where updates are not, or not yet available.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-30938US | high7.5 | — | ||
A vulnerability has been identified in EN100 Ethernet module DNP3 IP variant (All versions), EN100 Ethernet module IEC 104 variant (All versions), EN100 Ethernet module IEC 61850 v… | ||||
references
External citations — patches, advisories, analysis.
- SSA-865333: Memory Corruption Vulnerability in EN100 Ethernet Module - CSAF Versionself
- SSA-865333: Memory Corruption Vulnerability in EN100 Ethernet Module - PDF Versionself
- SSA-865333: Memory Corruption Vulnerability in EN100 Ethernet Module - TXT Versionself
- ICS Advisory ICSA-22-195-16 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-22-195-16 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (15)
- MitigationEN100 Ethernet module DNP3 IP variant
Disable web service within the device configuration if it is not used
- MitigationEN100 Ethernet module IEC 104 variant
Disable web service within the device configuration if it is not used
- MitigationEN100 Ethernet module IEC 61850 variant
Disable web service within the device configuration if it is not used
- MitigationEN100 Ethernet module Modbus TCP variant
Disable web service within the device configuration if it is not used
- MitigationEN100 Ethernet module PROFINET IO variant
Disable web service within the device configuration if it is not used
- No fix plannedEN100 Ethernet module DNP3 IP variant
Currently no fix is planned
- No fix plannedEN100 Ethernet module IEC 104 variant
Currently no fix is planned
- No fix plannedEN100 Ethernet module Modbus TCP variant
Currently no fix is planned
- No fix plannedEN100 Ethernet module PROFINET IO variant
Currently no fix is planned
- FixedEN100 Ethernet module IEC 61850 variant
Update to V4.40 or later version
https://support.industry.siemens.com/cs/ww/en/view/109745821/ - WorkaroundEN100 Ethernet module DNP3 IP variant
Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions
- WorkaroundEN100 Ethernet module IEC 104 variant
Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions
- WorkaroundEN100 Ethernet module IEC 61850 variant
Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions
- WorkaroundEN100 Ethernet module Modbus TCP variant
Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions
- WorkaroundEN100 Ethernet module PROFINET IO variant
Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan