CVE-2016-7112

highPriorität · verfolgen · 40OT-Risiko · erhöhtEPSS 0.029 · 87. PerzentilEUUS
grimoire priorityP2 · Scheduled
Exploitable?
—
no known exploitation
Likely / severe?
2.86% (87th) EPSS
CVSS 10 · high
Is it mine?
4 products
Prüfe deine Angriffsfläche
Who says so?
4 sources
cnnvd · enisa_euvd · cisa_csaf_ot · nvd

EPSS · bewertet 2026-10-22

A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions < V1.04.01; Firmware variant Modbus TCP for EN100 Ethernet module : All versions < V1.11.00; Firmware variant DNP3 TCP for EN100 Ethernet module : All versions < V1.03; Firmware variant IEC 104 for EN100 Ethernet module : All versions < V1.21; EN100 Ethernet module included in SIPROTEC Merging Unit 6MU80 : All versions < 1.02.02. Attackers with network access to the device's web interface (port 80/tcp) could possibly circumvent authentication and perform certain administrative operations.

01

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

  • BehobenEN100 Ethernet modules as optional for Reyrollecisa_csaf_ot

    For more information on these vulnerabilities and more detailed mitigation instructions, please see Siemens Security Advisory SSA-452237 at the following location:

  • BehobenFirmware variant DNP3 TCP for EN100 Ethernet modulecisa_csaf_ot

    Install V1.03 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821

    https://support.industry.siemens.com/cs/us/en/view/109745821
  • BehobenFirmware variant IEC 104 for EN100 Ethernet modulecisa_csaf_ot

    Install V1.21 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821

    https://support.industry.siemens.com/cs/us/en/view/109745821
  • BehobenFirmware variant Modbus TCP for EN100 Ethernet modulecisa_csaf_ot

    Install V1.11.00 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821

    https://support.industry.siemens.com/cs/us/en/view/109745821
  • BehobenFirmware variant PROFINET IO for EN100 Ethernet modulecisa_csaf_ot

    Install V1.04.01 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821

    https://support.industry.siemens.com/cs/us/en/view/109745821
  • BehobenIEC 61850 firmwarecisa_csaf_ot

    In addition, ICS-CERT recommends that users take the following measures to protect themselves from social engineering attacks:

  • BehobenTPOP firmwarecisa_csaf_ot

    In addition, ICS-CERT recommends that users take the following measures to protect themselves from social engineering attacks:

  • MitigationEN100 Ethernet module (as optional for SIPROTEC 4 and SIPROTEC Compact)cisa_csaf_ot

    Siemens provides firmware update V4.29 for EN100 modules included in SIPROTEC 4 and SIPROTEC Compact devices to fix the vulnerabilities. Siemens recommends users update to the latest firmware version.

  • MitigationEN100 Ethernet module included in SIPROTEC Merging Unit 6MU80cisa_csaf_ot

    Install V1.02.02 - Download: Please contact the Siemens hotline at support.energy@siemens.com

  • MitigationFirmware variant DNP3 TCP for EN100 Ethernet modulecisa_csaf_ot

    Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP

  • MitigationFirmware variant IEC 104 for EN100 Ethernet modulecisa_csaf_ot

    Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP

  • MitigationFirmware variant Modbus TCP for EN100 Ethernet modulecisa_csaf_ot

    Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP

  • MitigationFirmware variant PROFINET IO for EN100 Ethernet modulecisa_csaf_ot

    Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP

  • MitigationSIPROTEC 7SD686cisa_csaf_ot

    Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP

  • MitigationSIPROTEC 7SJ66cisa_csaf_ot

    Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP

  • MitigationSIPROTEC 7SJ686cisa_csaf_ot

    Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP

  • MitigationSIPROTEC 7UT686cisa_csaf_ot

    Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP

02

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

10.0
010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–critical · 5.3–10

v2.010highAV:N/AC:L/Au:N/C:C/I:C/A:Cprimary · NVD / NIST USAusnutzbarkeit 10 · Auswirkung 10
v3.09.8criticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USAusnutzbarkeit 3.9 · Auswirkung 5.9
v3.05.3mediumCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:Nsecondary · CISA US
v3.09criticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)
03

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-287USprimärCWE-287USCWE-288USCWE-862US
04

betroffene Produkte (4)

Betroffene Produkte und Versionsbereiche.

05

Advisories (4)

Hersteller- und Ökosystem-Meldungen dazu.

  • ICSA-16-250-01Siemens SIPROTEC 4 and SIPROTEC Compact Vulnerabilities2016-06-10icsa · cisa_csaf_otUS

    This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov

  • ICSA-17-187-02Siemens Reyrolle2017-07-06icsa · cisa_csaf_otUS

    ATTENTION: Remotely exploitable/low skill level to exploit.

  • ICSA-17-187-03FICSA-17-187-03F Siemens SIPROTEC 4 and SIPROTEC Compact (Update F)2017-07-04icsa · cisa_csaf_otUS

    CISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.

  • ICSA-17-334-01Siemens SWT30002017-11-30icsa · cisa_csaf_otUS

    ATTENTION: Remotely exploitable/low skill level to exploit.

06

auch bekannt als (3)

Weitere Namen und Kennungen dieser Entität.

07

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvdenisa_euvdcisa_csaf_otnvdNVDCVE.orgMITRE
veröffentlicht 2016-09-06geändert 2026-06-17
09

Referenzen (11)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan