PT-2016-7224 · Siemens · Siprotec Merging Unit 6Mu80+4

Publicado 2016-09-06 · Atualizado 2018-03-23 · CVE-2016-7114

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Firmware variant PROFINET IO for EN100 Ethernet module versions prior to V1.04.01 Firmware variant Modbus TCP for EN100 Ethernet module versions prior to V1.11.00 Firmware variant DNP3 TCP for EN100 Ethernet module versions prior to V1.03 Firmware variant IEC 104 for EN100 Ethernet module versions prior to V1.21 EN100 Ethernet module included in SIPROTEC Merging Unit 6MU80 versions prior to 1.02.02 SIPROTEC 7SJ686 versions prior to V 4.87 SIPROTEC 7UT686 versions prior to V 4.02 SIPROTEC 7SD686 versions prior to V 4.05 SIPROTEC 7SJ66 versions prior to V 4.30

Description A vulnerability has been identified that could allow attackers with network access to the device's web interface (port 80/tcp) to possibly circumvent authentication and perform certain administrative operations, but only if a legitimate user is logged into the web interface.

Recommendations For Firmware variant PROFINET IO for EN100 Ethernet module versions prior to V1.04.01, update to version V1.04.01 or later. For Firmware variant Modbus TCP for EN100 Ethernet module versions prior to V1.11.00, update to version V1.11.00 or later. For Firmware variant DNP3 TCP for EN100 Ethernet module versions prior to V1.03, update to version V1.03 or later. For Firmware variant IEC 104 for EN100 Ethernet module versions prior to V1.21, update to version V1.21 or later. For EN100 Ethernet module included in SIPROTEC Merging Unit 6MU80 versions prior to 1.02.02, update to version 1.02.02 or later. For SIPROTEC 7SJ686 versions prior to V 4.87, update to version V 4.87 or later. For SIPROTEC 7UT686 versions prior to V 4.02, update to version V 4.02 or later. For SIPROTEC 7SD686 versions prior to V 4.05, update to version V 4.05 or later. For SIPROTEC 7SJ66 versions prior to V 4.30, update to version V 4.30 or later.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2016-7114

Produtos afetados

En100 Ethernet Module

Siprotec 7Sd686

Siprotec 7Sj66

Siprotec 7Ut686

Siprotec Merging Unit 6Mu80

Referências · 7

• https://nvd.nist.gov/vuln/detail/CVE-2016-7114 · Nota de Segurança
• http://securityfocus.com/bid/92745 · Nota
• http://securityfocus.com/bid/99471 · Nota
• https://osv.dev/vulnerability/CVE-2016-7114 · Aviso do Fabricante
• http://siemens.com/cert/pool/cert/siemens_security_advisory_ssa-630413.pdf · Aviso do Fabricante
• https://siemens.com/cert/pool/cert/siemens_security_advisory_SSA-323211.pdf · Nota
• https://ics-cert.us-cert.gov/advisories/ICSA-17-187-03 · Nota