CVE-2015-5374
Siemens SIPROTEC 4 and SIPROTEC Compact EN100 Ethernet Module < 4.25 - Denial of Service
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
2Exploited in Wild
-Decision
Descriptions
A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions < V1.04.01; Firmware variant Modbus TCP for EN100 Ethernet module : All versions < V1.11.00; Firmware variant DNP3 TCP for EN100 Ethernet module : All versions < V1.03; Firmware variant IEC 104 for EN100 Ethernet module : All versions < V1.21; EN100 Ethernet module included in SIPROTEC Merging Unit 6MU80 : All versions < 1.02.02. Specially crafted packets sent to port 50000/UDP could cause a denial-of-service of the affected device. A manual reboot may be required to recover the service of the device.
Se ha identificado una vulnerabilidad en la variante de Firmware PROFINET IO para los módulos EN100 Ethernet: en todas las versiones anteriores a V1.04.01; la variante de Firmware Modbus TCP para los módulos EN100 Ethernet: en todas las versiones anteriores a V1.11.00; la variante de Firmware v TCP para los módulos EN100 Ethernet: en todas las versiones anteriores a V1.03; la variante de Firmware IEC 104 para los módulos EN100 Ethernet: en todas las versiones anteriores a V1.21 y el módulo EN100 Ethernet incluido en SIPROTEC Merging Unit 6MU80: todas las versiones anteriores a la 1.02.02. Los paquetes especialmente manipulados enviados al puerto 50000/UDP podrían provocar una denegación de servicio (DoS) en el dispositivo afectado. Podría ser necesario el reinicio manual para recuperar el servicio del dispositivo.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2015-07-06 CVE Reserved
- 2015-07-18 CVE Published
- 2018-08-28 First Exploit
- 2024-09-17 CVE Updated
- 2024-09-17 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-19: Data Processing Errors
CAPEC
References (7)
URL | Tag | Source |
---|---|---|
http://www.securityfocus.com/bid/75948 | Vdb Entry | |
https://ics-cert.us-cert.gov/advisories/ICSA-15-202-01 | X_refsource_misc | |
https://ics-cert.us-cert.gov/advisories/ICSA-17-187-03 | X_refsource_misc | |
https://www.siemens.com/cert/pool/cert/siemens_security_advisory_SSA-323211.pdf | X_refsource_confirm |
URL | Date | SRC |
---|---|---|
https://www.exploit-db.com/exploits/44103 | 2024-09-17 | |
https://github.com/can/CVE-2015-5374-DoS-PoC | 2018-08-28 |
URL | Date | SRC |
---|---|---|
http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-732541.pdf | 2018-03-23 |
URL | Date | SRC |
---|
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Siemens Search vendor "Siemens" | Siprotec Firmware Search vendor "Siemens" for product "Siprotec Firmware" | 4.24 Search vendor "Siemens" for product "Siprotec Firmware" and version "4.24" | - |
Affected
| in | Siemens Search vendor "Siemens" | Siprotec 4 Search vendor "Siemens" for product "Siprotec 4" | * | - |
Safe
|
Siemens Search vendor "Siemens" | Siprotec Firmware Search vendor "Siemens" for product "Siprotec Firmware" | 4.24 Search vendor "Siemens" for product "Siprotec Firmware" and version "4.24" | - |
Affected
| in | Siemens Search vendor "Siemens" | Siprotec Compact Search vendor "Siemens" for product "Siprotec Compact" | * | - |
Safe
|