Description
A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions < V1.04.01; Firmware variant Modbus TCP for EN100 Ethernet module : All versions < V1.11.00; Firmware variant DNP3 TCP for EN100 Ethernet module : All versions < V1.03; Firmware variant IEC 104 for EN100 Ethernet module : All versions < V1.21; EN100 Ethernet module included in SIPROTEC Merging Unit 6MU80 : All versions < 1.02.02. Specially crafted packets sent to port 50000/UDP could cause a denial-of-service of the affected device. A manual reboot may be required to recover the service of the device.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Metasploit 1 module
-
Siemens SIPROTEC 4 and SIPROTEC Compact EN100 Ethernet Module - Denial of Service
auxiliary/dos/scada/siemens_siprotec4
Exploit-DB 1
- Siemens SIPROTEC 4 and SIPROTEC Compact EN100 Ethernet Module < 4.25 - Denial of Service EDB-44103 · dos · Feb 16, 2018
GitHub 1 repository
-
can/CVE-2015-5374-DoS-PoC ★ 3 · Feb 14, 2018
CVE-2015-5374 Denial of Service PoC
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Advisories 2
- ICSA-15-202-01 Siemens SIPROTEC Denial-of-Service Vulnerability CISA ICS & IT advisories · Jun 25, 2025
- ICSA-17-187-03F ICSA-17-187-03F Siemens SIPROTEC 4 and SIPROTEC Compact (Update F) CISA ICS & IT advisories · Jun 12, 2018
References
- https://www.siemens.com/cert/pool/cert/siemens_security_advisory_SSA-323211.pdf
- http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-732541.pdf
- 44103 exploit
- https://ics-cert.us-cert.gov/advisories/ICSA-15-202-01
- https://ics-cert.us-cert.gov/advisories/ICSA-17-187-03
- 75948 vdb-entry