Skip to content
OpenAdvisories
High ICSA-17-187-03F 6 CVEs

ICSA-17-187-03F Siemens SIPROTEC 4 and SIPROTEC Compact (Update F)

Published Jul 4, 2017 · Updated Jun 12, 2018 · Revision 9

Vendor: Siemens Product: EN100 Ethernet module included in SIPROTEC Merging Unit 6MU80 Product: Firmware variant DNP3 TCP for EN100 Ethernet module Product: Firmware variant IEC 104 for EN100 Ethernet module Product: Firmware variant Modbus TCP for EN100 Ethernet module Product: Firmware variant PROFINET IO for EN100 Ethernet module Product: SIPROTEC 7SD686 Product: SIPROTEC 7SJ66 Product: SIPROTEC 7SJ686 Product: SIPROTEC 7UT686

Vulnerabilities 6

  • Unscored —
    CVE-2015-5374 Public exploit EPSS 74%

    A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions < V1.04.01…

  • Unscored —
    CVE-2016-4784

    A vulnerability has been identified in firmware variant PROFINET IO for EN100 Ethernet module : All versions < V1.04.01…

  • Unscored —
    CVE-2016-4785

    A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions < V1.04.01…

  • Unscored —
    CVE-2016-7112

    A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions < V1.04.01…

  • Unscored —
    CVE-2016-7113

    A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions < V1.04.01…

  • Unscored —
    CVE-2016-7114

    A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions < V1.04.01…

Revision history

  1. #9

    Clarified update for 7SJ686

  2. #8

    Added update for 7SJ66

  3. #7

    Added update for 7UT686

  4. #6

    Added update for 7SD686

  5. #5

    Corrected "Affected Products" and added update for SIPROTEC 7SJ686

  6. #4

    Added update for Modbus TCP

  7. #3

    Added update for IEC 104

  8. #2

    Added update for DNP3 TCP

  9. #1

    Publication Date

References