CVE-2015-5374 - CVE House
Back to Database
Status published High CVE-2015-5374

A vulnerability has been identified in Firmware variant PROFINET IO...

Vulnerability Description

A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions < V1.04.01; Firmware variant Modbus TCP for EN100 Ethernet module : All versions < V1.11.00; Firmware variant DNP3 TCP for EN100 Ethernet module : All versions < V1.03; Firmware variant IEC 104 for EN100 Ethernet module : All versions < V1.21; EN100 Ethernet module included in SIPROTEC Merging Unit 6MU80 : All versions < 1.02.02. Specially crafted packets sent to port 50000/UDP could cause a denial-of-service of the affected device. A manual reboot may be required to recover the service of the device.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2015-5374

Credits & Attribution

No credits recorded in the NVD database.

References

More from siemens

View All →
CVE-2023-39950
Insufficient input validation in efibootguard
Medium 6.1
CVE-2020-27632
In SIMATIC MV400 family versions prior to v7.0.6, the ISN...
High 7.5
CVE-2017-12069
An XXE vulnerability has been identified in OPC Foundation UA...
High 8.2
CVE-2017-11175
In J2 Innovations FIN Stack 4.0, the authentication webform is...
Medium 6.1
CVE-2016-8673
A vulnerability has been identified in SIMATIC CP 343-1 Advanced...
High 8.8

Affected Vendor

Affected Software

siprotec firmware
Vulnerable Versions:
4.24

Timeline

Official Publish: July 18th, 2015
Last Modified: September 17th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.