Siemens EN100 Ethernet Modules for Reyrolle ICSA-17-187-02 Multiple Security Vulnerabilities

Bugtraq ID:	99471
Class:	Unknown
CVE:	CVE-2016-4784 CVE-2016-4785 CVE-2016-7114 CVE-2016-7112 CVE-2016-7113
Remote:	Yes
Local:	No
Published:	Jul 06 2017 12:00AM
Updated:	Jul 06 2017 12:00AM
Credit:	Siemens
Vulnerable:	Siemens Reyrolle 0 Siemens EN100 Ethernet module 4.29 Siemens EN100 Ethernet module 4.20
Not Vulnerable:	Siemens EN100 Ethernet module 4.29.1

Siemens EN100 Ethernet Modules for Reyrolle ICSA-17-187-02 Multiple Security Vulnerabilities

EN100 Ethernet Modules for Reyrolle is prone to the following security vulnerabilities: :

1. Multiple information-disclosure vulnerabilities
2. A denial-of-service vulnerability
3. Multiple authentication-bypass vulnerabilities

An attacker may leverage these issues to disclose sensitive information, perform certain unauthorized actions actions, gain unauthorized access, or bypass certain security restrictions and cause a denial-of-service condition.

EN100 Ethernet Module prior to 4.29.01 are vulnerable.

Siemens EN100 Ethernet Modules for Reyrolle ICSA-17-187-02 Multiple Security Vulnerabilities

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Siemens EN100 Ethernet Modules for Reyrolle ICSA-17-187-02 Multiple Security Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Siemens EN100 Ethernet Modules for Reyrolle ICSA-17-187-02 Multiple Security Vulnerabilities

References:

• Siemens Homepage (Siemens)
  
• ICSA-17-187-02 Siemens Reyrolle (CERT)