Siemens EN100 Ethernet Module (Update A)

Vulnerabilities 3

• Unscored —
  CVE-2019-13942

  A vulnerability has been identified in EN100 Ethernet module DNP3 variant (All versions), EN100 Ethernet module IEC 618…

  Siemens EN100 Ethernet module PROFINET IO variant EN100 Ethernet module IEC 61850 variant EN100 Ethernet module Modbus TCP variant ICS / OT
  Dec 12, 2019
• Unscored —
  CVE-2019-13943

  A vulnerability has been identified in EN100 Ethernet module DNP3 variant (All versions), EN100 Ethernet module IEC 618…

  Siemens EN100 Ethernet module PROFINET IO variant EN100 Ethernet module IEC 61850 variant EN100 Ethernet module Modbus TCP variant ICS / OT
  Dec 12, 2019
• Unscored —
  CVE-2019-13944

  A vulnerability has been identified in EN100 Ethernet module DNP3 variant (All versions), EN100 Ethernet module IEC 618…

  Siemens EN100 Ethernet module PROFINET IO variant EN100 Ethernet module IEC 61850 variant EN100 Ethernet module Modbus TCP variant ICS / OT
  Dec 12, 2019

Revision history

1. 2020-01-14 #2

   Included SWT3000 in the product description section

2. 2019-12-10 #1

   Publication Date

References

• SSA-418979: Vulnerabilities in EN100 Ethernet Communication Module - HTML Version
  https://cert-portal.siemens.com/productcert/html/ssa-418979.html
• ICS Advisory ICSA-19-344-07 - Web Version
  https://www.cisa.gov/news-events/ics-advisories/icsa-19-344-07
• Recommended Practices
  https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
• Recommended Practices
  https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
• Recommended Practices
  https://www.cisa.gov/topics/industrial-control-systems
• Recommended Practices
  https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
• Recommended Practices
  https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
• Recommended Practices
  https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B