Summary
EN100 Ethernet module is affected by memory corruption vulnerability (CVE-2022-30938).
Siemens has released an update for the EN100 Ethernet module IEC 61850 variant and recommends to update to the latest version. Siemens recommends specific countermeasures for products where updates are not, or not yet available.
Vulnerabilities 1
-
Unscored —
A vulnerability has been identified in EN100 Ethernet module DNP3 IP variant (All versions), EN100 Ethernet module IEC …
Revision history
-
#1
Publication Date
References
-
SSA-865333: Memory Corruption Vulnerability in EN100 Ethernet Module - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-865333.pdf
-
SSA-865333: Memory Corruption Vulnerability in EN100 Ethernet Module - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-865333.txt