CVE-2016-7112
CriticalSummary
A vulnerability has been identified in the EN100 Ethernet module for various firmware variants that are older than specified versions. Attackers with access to the device's web interface may bypass authentication and perform certain administrative operations.
Risk Assessment
This vulnerability could lead to unauthorized access to administrative functions, posing a risk to the integrity and availability of the system.
Recommendation
It is recommended to update the firmware to the latest versions to mitigate this vulnerability and secure access to the web interface.
Original NVD description (English source)
A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions < V1.04.01; Firmware variant Modbus TCP for EN100 Ethernet module : All versions < V1.11.00; Firmware variant DNP3 TCP for EN100 Ethernet module : All versions < V1.03; Firmware variant IEC 104 for EN100 Ethernet module : All versions < V1.21; EN100 Ethernet module included in SIPROTEC Merging Unit 6MU80 : All versions < 1.02.02. Attackers with network access to the device's web interface (port 80/tcp) could possibly circumvent authentication and perform certain administrative operations.