Siemens EN100 Ethernet module 缓冲区错误漏洞

Siemens EN100 Ethernet Module is an Ethernet module product from Siemens, Germany. Siemens EN100 Ethernet Module is vulnerable to a memory corruption vulnerability that can be exploited by attackers to crash affected applications, resulting in a denial-of-service condition...

Siemens EN100 Ethernet module 缓冲区错误漏洞

Siemens EN100 Ethernet Module is an Ethernet module product from Siemens, Germany. Siemens EN100 Ethernet module is vulnerable to a memory corruption vulnerability that can be exploited by attackers to crash affected applications, resulting in a denial-of-service condition...

Siemens EN100 Ethernet module & SIPROTEC Merging Unit Denial of Service (CVE-2015-5374)

A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions V1.04.01; Firmware variant Modbus TCP for EN100 Ethernet module : All versions V1.11.00; Firmware variant DNP3 TCP for EN100 Ethernet module : All versions V1.03; Firmware variant IEC 104...

Siemens EN100 Ethernet Module Improper Restriction of Operations Within the Bounds of a Memory Buffer (CVE-2019-13942)

A vulnerability has been identified in EN100 Ethernet module DNP3 variant All versions, EN100 Ethernet module IEC 61850 variant All versions V4.37, EN100 Ethernet module IEC104 variant All versions, EN100 Ethernet module Modbus TCP variant All versions, EN100 Ethernet module PROFINET IO variant A...

Siemens En100 Improper Restriction of Operations within the Bounds of a Memory Buffer

A vulnerability has been identified in EN100 Ethernet module DNP3 variant All versions, EN100 Ethernet module IEC 61850 variant All versions V4.37, EN100 Ethernet module IEC104 variant All versions, EN100 Ethernet module Modbus TCP variant All versions, EN100 Ethernet module PROFINET IO variant A...

Siemens EN100 Ethernet Module Path Traversal Vulnerability

Siemens EN100 Ethernet Module is an Ethernet module product from Siemens, Germany. A path traversal vulnerability exists in the Siemens EN100 Ethernet Module that can be exploited by an attacker to obtain sensitive information about the device, including logs and configuration...

Siemens EN100 Ethernet Module Cross-Site Scripting Vulnerability

Siemens EN100 Ethernet Module is an Ethernet module product from Siemens, Germany. A cross-site scripting vulnerability exists in Siemens EN100 Ethernet Module, which can be exploited by an attacker to cause an application to behave in a manner not intended by a legitimate user...

Multiple Siemens EN100 Ethernet Modules SSA-418979 Multiple Security Vulnerabilities

Description Multiple Siemens EN100 Ethernet Modules are prone to multiple security vulnerabilities. An attacker may leverage these issues to execute arbitrary code, using directory-traversal sequences '../' to retrieve sensitive information and execute arbitrary script code in the browser of an...

CVE-2018-16563

A vulnerability has been identified in Firmware variant IEC 61850 for EN100 Ethernet module All versions V4.35, Firmware variant MODBUS TCP for EN100 Ethernet module All versions, Firmware variant DNP3 TCP for EN100 Ethernet module All versions, Firmware variant IEC104 for EN100 Ethernet module A...

Siemens EN100 Ethernet Communication Module Denial of Service Vulnerability

Siemens EN100 Ethernet Communication Module is an Ethernet module from Siemens, Germany. A denial of service vulnerability exists in the Siemens EN100 Ethernet Communication Module. An attacker can exploit this vulnerability by sending specially crafted packets to port 102/tcp while oscillographs...

Siemens EN100 Ethernet Communication Module and SIPROTEC 5 relays Denial of Service Vulnerability

Siemens EN100 Ethernet Communication Module and SIPROTEC 5 relays are products of Siemens, Germany.Siemens EN100 Ethernet Communication Module is an Ethernet module. The SIPROTEC 5 relays are relays. A denial of service vulnerability exists in the Siemens EN100 Ethernet Communication Module and...

The vulnerabilities of Siemens EN100 switching module software, SIPROTEC relay protection devices, and the DIGSI 4 device management and configuration software package are related to deficiencies in access control. This allows a intruder to gain full control over the device.

The vulnerabilities of Siemens EN100 switching module software, SIPROTEC relay protection devices, and the DIGSI 4 device management and configuration software package are related to deficiencies in access control. Exploiting these vulnerabilities could allow an attacker, operating remotely, to...

The vulnerabilities of Siemens EN100 switching module software, SIPROTEC relay protection devices, and the DIGSI 4 device management and configuration software package are related to authentication errors, allowing attackers to obtain access passwords.

The vulnerabilities of Siemens EN100 switching module software, SIPROTEC relay protection devices, and the DIGSI 4 device management and configuration software package are related to deficiencies in the authentication process. Exploiting these vulnerabilities can allow attackers to obtain access...

PT-2018-05: Unauthorized Firmware Modification in Siemens EN100 Ethernet modules

The specialists of the Positive Research center have detected an Unauthorized Firmware Modification vulnerability in Siemens EN100 Ethernet modules. Vulnerability allows unauthenticated attackers to upgrade or downgrade the firmware of the affected device including to older versions with known...