CVE-2016-7112

highpriority · track · 40OT risk · elevatedEPSS 0.029 · 87 %ileEUUS
grimoire priorityP2 · Scheduled
Exploitable?
—
no known exploitation
Likely / severe?
2.86% (87th) EPSS
CVSS 10 · high
Is it mine?
4 products
Check your exposure
Who says so?
4 sources
cnnvd · enisa_euvd · cisa_csaf_ot · nvd

EPSS · scored 2026-10-22

A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions < V1.04.01; Firmware variant Modbus TCP for EN100 Ethernet module : All versions < V1.11.00; Firmware variant DNP3 TCP for EN100 Ethernet module : All versions < V1.03; Firmware variant IEC 104 for EN100 Ethernet module : All versions < V1.21; EN100 Ethernet module included in SIPROTEC Merging Unit 6MU80 : All versions < 1.02.02. Attackers with network access to the device's web interface (port 80/tcp) could possibly circumvent authentication and perform certain administrative operations.

01

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

  • FixedEN100 Ethernet modules as optional for Reyrollecisa_csaf_ot

    For more information on these vulnerabilities and more detailed mitigation instructions, please see Siemens Security Advisory SSA-452237 at the following location:

  • FixedFirmware variant DNP3 TCP for EN100 Ethernet modulecisa_csaf_ot

    Install V1.03 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821

    https://support.industry.siemens.com/cs/us/en/view/109745821
  • FixedFirmware variant IEC 104 for EN100 Ethernet modulecisa_csaf_ot

    Install V1.21 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821

    https://support.industry.siemens.com/cs/us/en/view/109745821
  • FixedFirmware variant Modbus TCP for EN100 Ethernet modulecisa_csaf_ot

    Install V1.11.00 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821

    https://support.industry.siemens.com/cs/us/en/view/109745821
  • FixedFirmware variant PROFINET IO for EN100 Ethernet modulecisa_csaf_ot

    Install V1.04.01 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821

    https://support.industry.siemens.com/cs/us/en/view/109745821
  • FixedIEC 61850 firmwarecisa_csaf_ot

    In addition, ICS-CERT recommends that users take the following measures to protect themselves from social engineering attacks:

  • FixedTPOP firmwarecisa_csaf_ot

    In addition, ICS-CERT recommends that users take the following measures to protect themselves from social engineering attacks:

  • MitigationEN100 Ethernet module (as optional for SIPROTEC 4 and SIPROTEC Compact)cisa_csaf_ot

    Siemens provides firmware update V4.29 for EN100 modules included in SIPROTEC 4 and SIPROTEC Compact devices to fix the vulnerabilities. Siemens recommends users update to the latest firmware version.

  • MitigationEN100 Ethernet module included in SIPROTEC Merging Unit 6MU80cisa_csaf_ot

    Install V1.02.02 - Download: Please contact the Siemens hotline at support.energy@siemens.com

  • MitigationFirmware variant DNP3 TCP for EN100 Ethernet modulecisa_csaf_ot

    Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP

  • MitigationFirmware variant IEC 104 for EN100 Ethernet modulecisa_csaf_ot

    Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP

  • MitigationFirmware variant Modbus TCP for EN100 Ethernet modulecisa_csaf_ot

    Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP

  • MitigationFirmware variant PROFINET IO for EN100 Ethernet modulecisa_csaf_ot

    Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP

  • MitigationSIPROTEC 7SD686cisa_csaf_ot

    Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP

  • MitigationSIPROTEC 7SJ66cisa_csaf_ot

    Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP

  • MitigationSIPROTEC 7SJ686cisa_csaf_ot

    Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP

  • MitigationSIPROTEC 7UT686cisa_csaf_ot

    Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP

02

cvss

Technical severity, 0–10. One row per scoring source.

10.0
010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–critical · 5.3–10

v2.010highAV:N/AC:L/Au:N/C:C/I:C/A:Cprimary · NVD / NIST USexploitability 10 · impact 10
v3.09.8criticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USexploitability 3.9 · impact 5.9
v3.05.3mediumCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:Nsecondary · CISA US
v3.09criticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)
03

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-287USprimaryCWE-287USCWE-288USCWE-862US
04

affected products (4)

Products and version ranges known to be affected.

05

advisories (4)

Vendor and ecosystem advisories describing this.

  • ICSA-16-250-01Siemens SIPROTEC 4 and SIPROTEC Compact Vulnerabilities2016-06-10icsa · cisa_csaf_otUS

    This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov

  • ICSA-17-187-02Siemens Reyrolle2017-07-06icsa · cisa_csaf_otUS

    ATTENTION: Remotely exploitable/low skill level to exploit.

  • ICSA-17-187-03FICSA-17-187-03F Siemens SIPROTEC 4 and SIPROTEC Compact (Update F)2017-07-04icsa · cisa_csaf_otUS

    CISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.

  • ICSA-17-334-01Siemens SWT30002017-11-30icsa · cisa_csaf_otUS

    ATTENTION: Remotely exploitable/low skill level to exploit.

06

also known as (3)

Other names and identifiers for this entity.

07

sources

Which sources assert this record, and when.

cnnvdenisa_euvdcisa_csaf_otnvdNVDCVE.orgMITRE
published 2016-09-06modified 2026-06-17
09

references (11)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan