Design/Logic Flaw

2017-11-1508:29:00

PRIOn knowledge base

www.prio-n.com

6.2 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

46.6%

JSON

An issue was discovered on Siemens SICAM RTUs SM-2556 COM Modules with the firmware variants ENOS00, ERAC00, ETA2, ETLS00, MODi00, and DNPi00. The integrated web server (port 80/tcp) of the affected devices could allow unauthenticated remote attackers to obtain sensitive device information over the network.

CPENameOperatorVersion
sm-2556_firmwareeq0.0.0-dnpi
sm-2556_firmwareeq0.0.0-enos
sm-2556_firmwareeq0.0.0-erac
sm-2556_firmwareeq2.0.0-eta
sm-2556_firmwareeq0.0.0-etls
sm-2556_firmwareeq0.0.0-modi

Name	Operator	Version
sm-2556_firmware	eq	0.0.0-dnpi
sm-2556_firmware	eq	0.0.0-enos
sm-2556_firmware	eq	0.0.0-erac
sm-2556_firmware	eq	2.0.0-eta
sm-2556_firmware	eq	0.0.0-etls
sm-2556_firmware	eq	0.0.0-modi