Authentication flaw

A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions V1.04.01; Firmware variant Modbus TCP for EN100 Ethernet module : All versions V1.11.00; Firmware variant DNP3 TCP for EN100 Ethernet module : All versions V1.03; Firmware variant IEC 104...

CVE-2016-7112

A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions V1.04.01; Firmware variant Modbus TCP for EN100 Ethernet module : All versions V1.11.00; Firmware variant DNP3 TCP for EN100 Ethernet module : All versions V1.03; Firmware variant IEC 104...

CVE-2016-7113

A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions V1.04.01; Firmware variant Modbus TCP for EN100 Ethernet module : All versions V1.11.00; Firmware variant DNP3 TCP for EN100 Ethernet module : All versions V1.03; Firmware variant IEC 104...

CVE-2016-7112

A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions V1.04.01; Firmware variant Modbus TCP for EN100 Ethernet module : All versions V1.11.00; Firmware variant DNP3 TCP for EN100 Ethernet module : All versions V1.03; Firmware variant IEC 104...

CVE-2016-7114

Siemens SIPROTEC 4/Compact EN100 Ethernet module family is affected by CVE-2016-7114 (Improper Authentication). The vulnerability allows remote attackers with network access to the device web interface (port 80) to possibly circumvent authentication and perform administrative operations, requirin...

CVE-2016-7113

Siemens SIPROTEC 4/Compact EN100 Ethernet module vulnerabilities include CVE-2016-7113 (IMPROPER INPUT VALIDATION) where specially crafted packets to Port 80/TCP may cause the EN100 module to enter defect mode. Affected firmware variants are PROFINET IO (< V1.04.01), Modbus TCP (< V1.10.01/...

Mitsubishi LJ71E71-100-CM Communication Module Web Services Buffer Overflow Vulnerability

Mitsubishi L06 is a high-end PLC of Mitsubishi, its Ethernet communication module LJ71E71-100-CM is open to web service, support http protocol communication, you can access and set the configuration information of the device by logging into the web server. In the HTTP message sent to the...

Siemens SIPROTEC 4 and SIPROTEC Compact Vulnerabilities

OVERVIEW Siemens reports that they have released a firmware update for SIPROTEC 4 and SIPROTEC Compact devices to mitigate authentication bypass and resource exhaustion vulnerabilities. Kirill Nesterov and Anatoly Katushin from Kaspersky Lab reported some of these vulnerabilities directly to...

CVE-2016-4785

A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions V1.04.01; Firmware variant Modbus TCP for EN100 Ethernet module : All versions V1.11.00; Firmware variant DNP3 TCP for EN100 Ethernet module : All versions V1.03; Firmware variant IEC 104...

CVE-2016-4784

A vulnerability has been identified in firmware variant PROFINET IO for EN100 Ethernet module : All versions V1.04.01; Firmware variant Modbus TCP for EN100 Ethernet module : All versions V1.11.00; Firmware variant DNP3 TCP for EN100 Ethernet module : All versions V1.03; Firmware variant IEC 104...

CVE-2016-4784

A vulnerability has been identified in firmware variant PROFINET IO for EN100 Ethernet module : All versions V1.04.01; Firmware variant Modbus TCP for EN100 Ethernet module : All versions V1.11.00; Firmware variant DNP3 TCP for EN100 Ethernet module : All versions V1.03; Firmware variant IEC 104...

Design/Logic Flaw

A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions V1.04.01; Firmware variant Modbus TCP for EN100 Ethernet module : All versions V1.11.00; Firmware variant DNP3 TCP for EN100 Ethernet module : All versions V1.03; Firmware variant IEC 104...

Design/Logic Flaw

A vulnerability has been identified in firmware variant PROFINET IO for EN100 Ethernet module : All versions V1.04.01; Firmware variant Modbus TCP for EN100 Ethernet module : All versions V1.11.00; Firmware variant DNP3 TCP for EN100 Ethernet module : All versions V1.03; Firmware variant IEC 104...

CVE-2016-4785

SiemenS SIPROTEC 4/Compact EN100 Ethernet modules are affected by CVE-2016-4785. The integrated web server (port 80) could disclose a limited amount of device memory content to remote attackers with network access, and the issue only affects EN100 Ethernet modules inside SIPROTEC4 and SIPROTEC Co...

CVE-2016-4784

CVE-2016-4784 affects Siemens SIPROTEC SIPROTEC 4/Compact devices with EN100 Ethernet module and SIPROTEC Merging Unit 6MU80. The vulnerability is information disclosure via the integrated web server (port 80) when network access is possible, allowing remote attackers to obtain sensitive device i...

CVE-2016-4784

A vulnerability has been identified in firmware variant PROFINET IO for EN100 Ethernet module : All versions V1.04.01; Firmware variant Modbus TCP for EN100 Ethernet module : All versions V1.11.00; Firmware variant DNP3 TCP for EN100 Ethernet module : All versions V1.03; Firmware variant IEC 104...

Siemens SIPROTEC 4 and SIPROTEC Information Disclosure Vulnerability (CNVD-2016-03386)

Siemens SIPROTEC 4 is a series of multifunctional relays; SIPROTEC Compact is a microcomputer protection device. An information disclosure vulnerability exists in the integrated web server of the SIPROTEC 4 and SIPROTEC Compact. A remote attacker with network access could exploit this vulnerabili...

Denial of Service Vulnerability in OMRON CP1W-C1F41 Module HTTP Service

OMRON CP1H-XA40DT-D is a compact PLC from OMRON Japan, widely used in manufacturing industry.CP1W-C1F41 is an Ethernet module for CP1H-XA40DT-D PLC. A denial of service vulnerability exists in the HTTP protocol of the CP1W-C1F41 module. After establishing a link with port 80 of the CP1W-C1F41 via...

Siemens SIPROTEC Information Disclosure Vulnerabilities (Update B)

1. EXECUTIVE SUMMARY CVSS v3 5.3 ATTENTION : Exploitable remotely/low skill level to exploit Vendor : Siemens Equipment : SIPROTEC 4 and SIPROTEC Compact Vulnerabilities : Information Exposure 2. UPDATE INFORMATION This updated advisory is a follow-up to the updated advisory titled ICSA-16-140-02...

The vulnerability of Schneider Electric’s Quantum Ethernet Module allows a remote intruder to gain privileged access to the system.

The vulnerability of Schneider Electric’s Quantum Ethernet Module is related to the presence of rigidly encrypted data for default authentication through ports such as TELNET, FTP, or Windriver Debug for accounts like AUTCSE, AUTCSE, fdrusers, ftpuser, loader, nic2212, nimrohs2212, nip2212,...