Description
A vulnerability has been identified in EN100 Ethernet module IEC 61850 variant (All versions < V4.30), EN100 Ethernet module DNP3 variant (All versions < V1.04), EN100 Ethernet module PROFINET IO variant (All versions), EN100 Ethernet module Modbus TCP variant (All versions), EN100 Ethernet module IEC 104 variant (All versions < V1.22). The web interface (TCP/80) of affected devices allows an unauthenticated user to upgrade or downgrade the firmware of the device, including to older versions with known vulnerabilities.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | EN100 Ethernet module IEC 61850 variant | All versions < V4.30 | — |
| Siemens | EN100 Ethernet module DNP3 variant | All versions < V1.04 | — |
| Siemens | EN100 Ethernet module PROFINET IO variant | All versions | — |
| Siemens | EN100 Ethernet module Modbus TCP variant | All versions | — |
| Siemens | EN100 Ethernet module IEC 104 variant | All versions < V1.22 | — |
Advisories 1
- ICSA-18-067-02 ICSA-18-067-02_Siemens SIPROTEC 4, SIPROTEC Compact, and Reyrolle Devices using the EN100 Ethernet Communication Module Extension (Update B) CISA ICS & IT advisories · Feb 12, 2019