Siemens SENTRON 3KC ATC6 Ethernet Module Hidden Function Vulnerability

The Siemens SENTRON 3KC ATC6 Expansion Module is a power distribution protection device from Siemens, Germany, for monitoring and protecting power systems. A hidden function vulnerability exists in the Siemens SENTRON 3KC ATC6 Ethernet Module due to affected devices exposing unused and unstable http services at port 80/tcp on Modbus-tcp Ethernet. An attacker on the same Modbus network is allowed to exploit the vulnerability to create a denial of service condition and force the device to reboot.