Siemens EN100 Ethernet Communication Module and SIPROTEC 5 Relays Improper Input Validation (CVE-2018-16563)

A vulnerability has been identified in Firmware variant IEC 61850 for EN100 Ethernet module All versions V4.35, Firmware variant MODBUS TCP for EN100 Ethernet module All versions, Firmware variant DNP3 TCP for EN100 Ethernet module All versions, Firmware variant IEC104 for EN100 Ethernet module A...

CVE-2018-16563

Siemens EN100 Ethernet Communication Module and SIPROTEC 5 Relays are affected by CVE-2018-16563 due to improper input validation. Specially crafted packets sent to TCP port 102 can cause a denial-of-service, requiring a manual restart to restore EN100 module functionality. Exploitation requires ...