CVE-2016-4784

mediumPriorität · verfolgen · 22OT-Risiko · erhöhtEPSS 0.027 · 86. PerzentilEUUS
grimoire priorityP3 · Track
Exploitable?
—
no known exploitation
Likely / severe?
2.68% (86th) EPSS
CVSS 5 · medium
Is it mine?
15 products
Prüfe deine Angriffsfläche
Who says so?
4 sources
cnnvd · enisa_euvd · cisa_csaf_ot · nvd

EPSS · bewertet 2026-10-22

A vulnerability has been identified in firmware variant PROFINET IO for EN100 Ethernet module : All versions < V1.04.01; Firmware variant Modbus TCP for EN100 Ethernet module : All versions < V1.11.00; Firmware variant DNP3 TCP for EN100 Ethernet module : All versions < V1.03; Firmware variant IEC 104 for EN100 Ethernet module : All versions < V1.21; EN100 Ethernet module included in SIPROTEC Merging Unit 6MU80 : All versions < 1.02.02; SIPROTEC 7SJ686 : All versions < V 4.83; SIPROTEC 7UT686 : All versions < V 4.01; SIPROTEC 7SD686 : All versions < V 4.03; SIPROTEC 7SJ66 : All versions < V 4.20. The integrated web server (port 80/tcp) of the affected devices could allow remote attackers to obtain sensitive device information if network access was obtained.

01

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

  • BehobenEN100 Ethernet modules as optional for Reyrollecisa_csaf_ot

    For more information on these vulnerabilities and more detailed mitigation instructions, please see Siemens Security Advisory SSA-452237 at the following location:

  • BehobenFirmware variant DNP3 TCP for EN100 Ethernet modulecisa_csaf_ot

    Install V1.03 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821

    https://support.industry.siemens.com/cs/us/en/view/109745821
  • BehobenFirmware variant IEC 104 for EN100 Ethernet modulecisa_csaf_ot

    Install V1.21 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821

    https://support.industry.siemens.com/cs/us/en/view/109745821
  • BehobenFirmware variant Modbus TCP for EN100 Ethernet modulecisa_csaf_ot

    Install V1.11.00 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821

    https://support.industry.siemens.com/cs/us/en/view/109745821
  • BehobenFirmware variant PROFINET IO for EN100 Ethernet modulecisa_csaf_ot

    Install V1.04.01 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821

    https://support.industry.siemens.com/cs/us/en/view/109745821
  • BehobenSIPROTEC 7SJ66cisa_csaf_ot

    Install V 4.20 - Download: https://support.industry.siemens.com/cs/gb/en/view/109743555

    https://support.industry.siemens.com/cs/gb/en/view/109743555
  • BehobenIEC 61850 firmwarecisa_csaf_ot

    In addition, ICS-CERT recommends that users take the following measures to protect themselves from social engineering attacks:

  • BehobenTPOP firmwarecisa_csaf_ot

    In addition, ICS-CERT recommends that users take the following measures to protect themselves from social engineering attacks:

  • MitigationEN100 Ethernet module included in SIPROTEC 4cisa_csaf_ot

    For more information on these vulnerabilities and more detailed mitigation instructions, please see Siemens Security Advisory SSA-547990 at the following location: (http://www.siemens.com/cert/advisories)

    http://www.siemens.com/cert/advisories
  • MitigationEN100 Ethernet module included in SIPROTEC Compactcisa_csaf_ot

    For more information on these vulnerabilities and more detailed mitigation instructions, please see Siemens Security Advisory SSA-547990 at the following location: (http://www.siemens.com/cert/advisories)

    http://www.siemens.com/cert/advisories
  • MitigationSIPROTEC Compact model 7SJ80 with Ethernet Service Interface on Port A Firmwarecisa_csaf_ot

    For more information on these vulnerabilities and more detailed mitigation instructions, please see Siemens Security Advisory SSA-547990 at the following location: (http://www.siemens.com/cert/advisories)

    http://www.siemens.com/cert/advisories
  • MitigationSIPROTEC Compact models 7RW80 with Ethernet Service Interface on Port Acisa_csaf_ot

    For more information on these vulnerabilities and more detailed mitigation instructions, please see Siemens Security Advisory SSA-547990 at the following location: (http://www.siemens.com/cert/advisories)

    http://www.siemens.com/cert/advisories
  • MitigationSIPROTEC Compact models 7SJ81 with Ethernet Service Interface on Port Acisa_csaf_ot

    For more information on these vulnerabilities and more detailed mitigation instructions, please see Siemens Security Advisory SSA-547990 at the following location: (http://www.siemens.com/cert/advisories)

    http://www.siemens.com/cert/advisories
  • MitigationSIPROTEC Compact models 7SK81 with Ethernet Service Interface on Port Acisa_csaf_ot

    For more information on these vulnerabilities and more detailed mitigation instructions, please see Siemens Security Advisory SSA-547990 at the following location: (http://www.siemens.com/cert/advisories)

    http://www.siemens.com/cert/advisories
  • MitigationEN100 Ethernet module included in SIPROTEC Merging Unit 6MU80cisa_csaf_ot

    Install V1.02.02 - Download: Please contact the Siemens hotline at support.energy@siemens.com

  • MitigationFirmware variant DNP3 TCP for EN100 Ethernet modulecisa_csaf_ot

    Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP

  • MitigationFirmware variant IEC 104 for EN100 Ethernet modulecisa_csaf_ot

    Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP

  • MitigationFirmware variant Modbus TCP for EN100 Ethernet modulecisa_csaf_ot

    Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP

  • MitigationFirmware variant PROFINET IO for EN100 Ethernet modulecisa_csaf_ot

    Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP

  • MitigationSIPROTEC 7SD686cisa_csaf_ot

    Install V 4.03 - Download: http://www.siemensenergysector.com/ProductRelatedDown.aspx?ProductId=64

  • MitigationSIPROTEC 7SJ66cisa_csaf_ot

    Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP

  • MitigationSIPROTEC 7SJ686cisa_csaf_ot

    Install V 4.83 - Download: http://www.siemensenergysector.com/ProductRelatedDown.aspx?ProductId=51

  • MitigationSIPROTEC 7UT686cisa_csaf_ot

    Install V 4.01 - Download: http://www.siemensenergysector.com/ProductRelatedDown.aspx?ProductId=68

02

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

5.3
010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen

v2.05mediumAV:N/AC:L/Au:N/C:P/I:N/A:Nprimary · NVD / NIST USAusnutzbarkeit 10 · Auswirkung 2.9
v3.05.3mediumCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:Nprimary · NVD / NIST USAusnutzbarkeit 3.9 · Auswirkung 1.4
v3.05.3mediumCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:Nsecondary · CISA US
v3.04.9mediumCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:Usecondary · CVSS-BT (t0sche)
03

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-200USprimärCWE-200USCWE-287USCWE-862US
04

betroffene Produkte (15)

Betroffene Produkte und Versionsbereiche.

05

Advisories (4)

Hersteller- und Ökosystem-Meldungen dazu.

  • ICSA-16-140-02Siemens SIPROTEC Information Disclosure Vulnerabilities (Update B)2016-02-20icsa · cisa_csaf_otUS

    This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov

  • ICSA-17-187-02Siemens Reyrolle2017-07-06icsa · cisa_csaf_otUS

    ATTENTION: Remotely exploitable/low skill level to exploit.

  • ICSA-17-187-03FICSA-17-187-03F Siemens SIPROTEC 4 and SIPROTEC Compact (Update F)2017-07-04icsa · cisa_csaf_otUS

    CISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.

  • ICSA-17-334-01Siemens SWT30002017-11-30icsa · cisa_csaf_otUS

    ATTENTION: Remotely exploitable/low skill level to exploit.

06

auch bekannt als (3)

Weitere Namen und Kennungen dieser Entität.

07

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvdenisa_euvdcisa_csaf_otnvdNVDCVE.orgMITRE
veröffentlicht 2016-05-31geändert 2026-06-17
09

Referenzen (15)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan