PT-2016-6139 · Siemens · Siprotec Merging Unit 6Mu80+1

Aleksandr Bersenev + 1 · Published 2016-05-31 · Updated 2018-03-23 · CVE-2016-4785

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Firmware variant PROFINET IO for EN100 Ethernet module versions prior to V1.04.01 Firmware variant Modbus TCP for EN100 Ethernet module versions prior to V1.11.00 Firmware variant DNP3 TCP for EN100 Ethernet module versions prior to V1.03 Firmware variant IEC 104 for EN100 Ethernet module versions prior to V1.21 EN100 Ethernet module included in SIPROTEC Merging Unit 6MU80 versions prior to 1.02.02

Description A vulnerability has been identified that could allow remote attackers to obtain a limited amount of device memory content if network access was obtained, affecting the integrated web server on port 80/tcp of the affected devices.

Recommendations For Firmware variant PROFINET IO for EN100 Ethernet module versions prior to V1.04.01, update to version V1.04.01 or later. For Firmware variant Modbus TCP for EN100 Ethernet module versions prior to V1.11.00, update to version V1.11.00 or later. For Firmware variant DNP3 TCP for EN100 Ethernet module versions prior to V1.03, update to version V1.03 or later. For Firmware variant IEC 104 for EN100 Ethernet module versions prior to V1.21, update to version V1.21 or later. For EN100 Ethernet module included in SIPROTEC Merging Unit 6MU80 versions prior to 1.02.02, update to version 1.02.02 or later. As a temporary workaround, consider restricting access to the integrated web server on port 80/tcp to minimize the risk of exploitation.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2016-4785

Affected Products

En100 Ethernet Module

Siprotec Merging Unit 6Mu80

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2016-4785 · Security Note
• https://osv.dev/vulnerability/CVE-2016-4785 · Vendor Advisory
• http://siemens.com/cert/pool/cert/siemens_security_advisory_ssa-547990.pdf · Vendor Advisory
• http://securityfocus.com/bid/99471 · Note
• http://securityfocus.com/bid/90773 · Note
• https://ics-cert.us-cert.gov/advisories/ICSA-16-140-02 · Note
• https://ics-cert.us-cert.gov/advisories/ICSA-17-187-03 · Note
• https://siemens.com/cert/pool/cert/siemens_security_advisory_SSA-323211.pdf · Note