CVE-2016-7114
HighSummary
A vulnerability has been identified in the EN100 Ethernet module affecting various firmware variants. Attackers with access to the device's web interface may bypass authentication and perform certain administrative operations.
Risk Assessment
This vulnerability could lead to unauthorized access to administrative functions, posing a risk to the integrity and availability of the system. In the event of an attack, it may cause significant disruptions to the device's operation.
Recommendation
It is recommended to update the firmware to the latest versions to mitigate this vulnerability. Access to the web interface should also be restricted to trusted users.
Other vulnerabilities in EN100 Ethernet module
See all- CVE-2016-7113High
A vulnerability has been identified in the EN100 Ethernet module affecting various firmware variants. Versions below specified numbers may be susceptible to an attack that causes the device to enter defect mode upon receiving specially crafted packets on port 80/tcp.
- CVE-2015-5374High
A vulnerability has been identified in the EN100 Ethernet module for various firmware variants that could lead to denial-of-service. Specifically crafted packets sent to port 50000/UDP could cause the device to crash.
- CVE-2016-7112Critical
A vulnerability has been identified in the EN100 Ethernet module for various firmware variants that are older than specified versions. Attackers with access to the device's web interface may bypass authentication and perform certain administrative operations.
Original NVD description (English source)
A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions < V1.04.01; Firmware variant Modbus TCP for EN100 Ethernet module : All versions < V1.11.00; Firmware variant DNP3 TCP for EN100 Ethernet module : All versions < V1.03; Firmware variant IEC 104 for EN100 Ethernet module : All versions < V1.21; EN100 Ethernet module included in SIPROTEC Merging Unit 6MU80 : All versions < 1.02.02; SIPROTEC 7SJ686 : All versions < V 4.87; SIPROTEC 7UT686 : All versions < V 4.02; SIPROTEC 7SD686 : All versions < V 4.05; SIPROTEC 7SJ66 : All versions < V 4.30. Attackers with network access to the device's web interface (port 80/tcp) could possibly circumvent authentication and perform certain administrative operations. A legitimate user must be logged into the web interface for the attack to be successful.