SSA-865333: Memory Corruption Vulnerability in EN100 Ethernet Module
EN100 Ethernet module is affected by memory corruption vulnerability (CVE-2022-30938). Siemens has released an update for the EN100 Ethernet module IEC 61850 variant and recommends to update to the latest version. Siemens recommends specific countermeasures for products where updates are not, or not yet available.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-30938US | high7.5 | — | ||
A vulnerability has been identified in EN100 Ethernet module DNP3 IP variant (All versions), EN100 Ethernet module IEC 104 variant (All versions), EN100 Ethernet module IEC 61850 v… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (15)
- MitigationEN100 Ethernet module DNP3 IP variant
Disable web service within the device configuration if it is not used
- MitigationEN100 Ethernet module IEC 104 variant
Disable web service within the device configuration if it is not used
- MitigationEN100 Ethernet module IEC 61850 variant
Disable web service within the device configuration if it is not used
- MitigationEN100 Ethernet module Modbus TCP variant
Disable web service within the device configuration if it is not used
- MitigationEN100 Ethernet module PROFINET IO variant
Disable web service within the device configuration if it is not used
- Kein Fix geplantEN100 Ethernet module DNP3 IP variant
Currently no fix is planned
- Kein Fix geplantEN100 Ethernet module IEC 104 variant
Currently no fix is planned
- Kein Fix geplantEN100 Ethernet module Modbus TCP variant
Currently no fix is planned
- Kein Fix geplantEN100 Ethernet module PROFINET IO variant
Currently no fix is planned
- BehobenEN100 Ethernet module IEC 61850 variant
Update to V4.40 or later version
https://support.industry.siemens.com/cs/ww/en/view/109745821/ - WorkaroundEN100 Ethernet module DNP3 IP variant
Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions
- WorkaroundEN100 Ethernet module IEC 104 variant
Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions
- WorkaroundEN100 Ethernet module IEC 61850 variant
Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions
- WorkaroundEN100 Ethernet module Modbus TCP variant
Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions
- WorkaroundEN100 Ethernet module PROFINET IO variant
Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan