CVE-2016-7112 in SIPROTEC

Riassunto

di MITRE

The EN100 Ethernet module before 4.29 for Siemens SIPROTEC 4 and SIPROTEC Compact devices allows remote attackers to bypass authentication and obtain administrative access via unspecified HTTP traffic.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Prenotare: 30/08/2016
• Divulgazione: 05/09/2016
• Moderazione: accettato
• Voce: VDB-91289
• CPE: pronto
• CWE: CWE-287 (confermato)
• CVSS: 9.8 (NVD)
• EPSS: 0.00717
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-7112
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-7112
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-7112/