NewsSiemens ProductCERT

SSA-865333 V1.0: Memory Corruption Vulnerability in EN100 Ethernet Module

EN100 Ethernet module is affected by memory corruption vulnerability (CVE-2022-30938). Siemens has released an update for the EN100 Ethernet module IEC 61850 variant and recommends to update to the latest version. Siemens recommends specific countermeasures for products where updates are not, or not yet available.

CVE-2022-30938Siemens ProductCERT Advisory SSA-865333
CVE-2022-30938Eine Schwachstelle wurde im EN100 Ethernet Modul DNP3 IP Variante (alle Versionen), EN100 Ethernet Modul IEC 104 Variante (alle Versionen), EN100 Ethernet Modul IEC 61850 Variante (Versionen < V4.
CVE-2022-30938Siemens EN100 Ethernet module: Pufferüberlauf

Affected vendors and products

Siemens Siemens EN100 Ethernet Module IEC 104 Firmware
Siemens En100 Ethernet Module Iec 104 Variant
Siemens Siemens EN100 Ethernet Module IEC 61850 Firmware
Siemens En100 Ethernet Module Iec 61850 Variant
Siemens Siemens EN100 Ethernet Module MODBUS TCP Firmware
Siemens En100 Ethernet Module Modbus Tcp Variant
Siemens Siemens EN100 Ethernet Module PROFINET IO Firmware
Siemens En100 Ethernet Module Profinet Io Variant

Other advisories

HighCVE-2022-30938Siemens ProductCERT Advisory SSA-865333

Source: https://cert-portal.siemens.com/productcert/pdf/ssa-865333.pdf

Linked advisories

Affected vendors and products

More on SSA-865333

Other advisories