NewsSiemens ProductCERT

SSA-693555 V1.0: Memory Corruption Vulnerability in EN100 Ethernet Module

EN100 Ethernet module is affected by memory corruption vulnerability (CVE-2022-30937). Siemens has released an update for the EN100 Ethernet module IEC 61850 variant and recommends to update to the latest version. Siemens recommends specific countermeasures for products where updates are not, or not yet available.

CVE-2022-30937Eine Schwachstelle wurde im EN100 Ethernet Modul DNP3 IP Variante (alle Versionen), EN100 Ethernet Modul IEC 104 Variante (alle Versionen), EN100 Ethernet Modul IEC 61850 Variante (Versionen < V4.
CVE-2022-30937Siemens EN100 Ethernet module: Pufferüberlauf
CVE-2022-30937Siemens ProductCERT Advisory SSA-693555

Affected vendors and products

Siemens Siemens EN100 Ethernet Module DNP3 Firmware
Siemens Siemens EN100 Ethernet Module IEC 104 Firmware
Siemens En100 Ethernet Module Iec 104 Variant
Siemens Siemens EN100 Ethernet Module IEC 61850 Firmware
Siemens En100 Ethernet Module Iec 61850 Variant
Siemens Siemens EN100 Ethernet Module MODBUS TCP Firmware
Siemens En100 Ethernet Module Modbus Tcp Variant
Siemens Siemens EN100 Ethernet Module PROFINET IO Firmware
Siemens En100 Ethernet Module Profinet Io Variant

Other advisories

HighCVE-2022-30937Siemens ProductCERT Advisory SSA-693555

Source: https://cert-portal.siemens.com/productcert/pdf/ssa-693555.pdf

Linked advisories

Affected vendors and products

More on SSA-693555

Other advisories