CVE-2016-4784

N/A
Published: May 31, 2016 at 01:00 AM UTC
Updated: June 17, 2026 at 12:48 AM UTC
9 products affected across 1 vendorSiprotec FirmwareSiprotec Compact Model 7Sk81Siprotec Compact Model 7Sd80

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 3%

Description

A vulnerability has been identified in firmware variant PROFINET IO for EN100 Ethernet module : All versions < V1.04.01; Firmware variant Modbus TCP for EN100 Ethernet module : All versions < V1.11.00; Firmware variant DNP3 TCP for EN100 Ethernet module : All versions < V1.03; Firmware variant IEC 104 for EN100 Ethernet module : All versions < V1.21; EN100 Ethernet module included in SIPROTEC Merging Unit 6MU80 : All versions < 1.02.02; SIPROTEC 7SJ686 : All versions < V 4.83; SIPROTEC 7UT686 : All versions < V 4.01; SIPROTEC 7SD686 : All versions < V 4.03; SIPROTEC 7SJ66 : All versions < V 4.20. The integrated web server (port 80/tcp) of the affected devices could allow remote attackers to obtain sensitive device information if network access was obtained.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

siemens-siprotec-4-en100 (same device) · siemens-siprotec-compact-model-7rw80 (same device) · siemens-siprotec-compact-model-7sd80 (same device) · siemens-siprotec-compact-model-7sj80 (same device) · siemens-siprotec-compact-model-7sj81 (same device) · siemens-siprotec-compact-model-7sk80 (same device) · siemens-siprotec-compact-model-7sk81 (same device) · siemens-siprotec-compact-model-en100 (same device)
All versions

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

CVSS

Confidentiality
PARTIAL
Integrity
NONE
Availability
NONE
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-200

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card