Siemens SIPROTEC Denial-of-Service Vulnerability
Advisory ansehen veröffentlicht 2015-04-23
This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2015-5374US | high7.8 | Exploit | ||
A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions < V1.04.01; Firmware variant Modbus TCP for EN100 Ethernet module : All… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-15-202-01 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-15-202-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
Behebungen (2)
- MitigationEN100 Ethernet module
Siemens has provided firmware update V4.25 for the EN100 module to fix the vulnerability.
- MitigationSIPROTEC 4 and SIPROTEC Compact product families
Siemens has provided firmware update V4.25 for the EN100 module to fix the vulnerability.
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan