SSA-865333

csafDEsiemens_psirt

SSA-865333: Memory Corruption Vulnerability in EN100 Ethernet Module

view advisory published 2022-07-12

EN100 Ethernet module is affected by memory corruption vulnerability (CVE-2022-30938). Siemens has released an update for the EN100 Ethernet module IEC 61850 variant and recommends to update to the latest version. Siemens recommends specific countermeasures for products where updates are not, or not yet available.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2022-30938UShigh7.5—
A vulnerability has been identified in EN100 Ethernet module DNP3 IP variant (All versions), EN100 Ethernet module IEC 104 variant (All versions), EN100 Ethernet module IEC 61850 v…
02

references

External citations — patches, advisories, analysis.

03

remediations (15)

  • MitigationEN100 Ethernet module DNP3 IP variant

    Disable web service within the device configuration if it is not used

  • MitigationEN100 Ethernet module IEC 104 variant

    Disable web service within the device configuration if it is not used

  • MitigationEN100 Ethernet module IEC 61850 variant

    Disable web service within the device configuration if it is not used

  • MitigationEN100 Ethernet module Modbus TCP variant

    Disable web service within the device configuration if it is not used

  • MitigationEN100 Ethernet module PROFINET IO variant

    Disable web service within the device configuration if it is not used

  • No fix plannedEN100 Ethernet module DNP3 IP variant

    Currently no fix is planned

  • No fix plannedEN100 Ethernet module IEC 104 variant

    Currently no fix is planned

  • No fix plannedEN100 Ethernet module Modbus TCP variant

    Currently no fix is planned

  • No fix plannedEN100 Ethernet module PROFINET IO variant

    Currently no fix is planned

  • FixedEN100 Ethernet module IEC 61850 variant

    Update to V4.40 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109745821/
  • WorkaroundEN100 Ethernet module DNP3 IP variant

    Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions

  • WorkaroundEN100 Ethernet module IEC 104 variant

    Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions

  • WorkaroundEN100 Ethernet module IEC 61850 variant

    Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions

  • WorkaroundEN100 Ethernet module Modbus TCP variant

    Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions

  • WorkaroundEN100 Ethernet module PROFINET IO variant

    Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan