CVE-2016-4785 Details
Description
A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions < V1.04.01; Firmware variant Modbus TCP for EN100 Ethernet module : All versions < V1.11.00; Firmware variant DNP3 TCP for EN100 Ethernet module : All versions < V1.03; Firmware variant IEC 104 for EN100 Ethernet module : All versions < V1.21; EN100 Ethernet module included in SIPROTEC Merging Unit 6MU80 : All versions < 1.02.02. The integrated web server (port 80/tcp) of the affected devices could allow remote attackers to obtain a limited amount of device memory content if network access was obtained. This vulnerability only affects EN100 Ethernet module included in SIPROTEC4 and SIPROTEC Compact devices.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-200 | Exposure of Sensitive Information to an Unauthorized Actor | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| siemens siprotec 4 en100 | All versions |
CPE
Remediation
| |
| siemens siprotec compact model | All versions |
CPE
Remediation
| |
| siemens siprotec firmware | 4.26 |
CPE
Remediation
| |
| siemens siprotec compact model 7rw80 | All versions |
CPE
Remediation
| |
| siemens siprotec compact model 7sd80 | All versions |
CPE
Remediation
| |
| siemens siprotec compact model 7sj80 | All versions |
CPE
Remediation
| |
| siemens siprotec compact model 7sj81 | All versions |
CPE
Remediation
| |
| siemens siprotec compact model 7sk80 | All versions |
CPE
Remediation
| |
| siemens siprotec compact model 7sk81 | All versions |
CPE
Remediation
| |
Change History
10 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| May 6, 2026 | Status Change | [email protected] |
| Nov 21, 2024 | CVE Modified | CVE |
| May 14, 2024 | CVE Modified | [email protected] |
| Mar 23, 2018 | CVE Modified | [email protected] |
| Jan 3, 2018 | CVE Modified | [email protected] |
| Jul 13, 2017 | CVE Modified | [email protected] |
| Jul 11, 2017 | CVE Modified | [email protected] |
| Jun 1, 2016 | Modified Analysis | [email protected] |
| May 31, 2016 | Initial Analysis | [email protected] |