Siemens EN100 Ethernet Module DNP3 Web Server path traversal

Summaryinfo

A vulnerability, which was classified as problematic, has been found in Siemens EN100 Ethernet Module DNP3, EN100 Ethernet Module IEC 61850, EN100 Ethernet Module IEC104, EN100 Ethernet Module Modbus TCP and EN100 Ethernet Module PROFINET IO. This issue affects some unknown processing of the component Web Server. This manipulation causes path traversal. This vulnerability is registered as CVE-2019-13944. Remote exploitation of the attack is possible. No exploit is available.

Detailsinfo

A vulnerability was found in Siemens EN100 Ethernet Module DNP3, EN100 Ethernet Module IEC 61850, EN100 Ethernet Module IEC104, EN100 Ethernet Module Modbus TCP and EN100 Ethernet Module PROFINET IO. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Web Server. The manipulation with an unknown input leads to a path traversal vulnerability. The CWE definition for the vulnerability is CWE-23. The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize sequences such as ".." that can resolve to a location that is outside of that directory. As an impact it is known to affect confidentiality. The summary by CVE is:

A vulnerability has been identified in EN100 Ethernet module DNP3 variant (All versions), EN100 Ethernet module IEC 61850 variant (All versions < V4.37), EN100 Ethernet module IEC104 variant (All versions), EN100 Ethernet module Modbus TCP variant (All versions), EN100 Ethernet module PROFINET IO variant (All versions). A vulnerability in the integrated web server of the affected devices could allow unauthorized attackers to obtain sensitive information about the device, including logs and configurations. At the time of advisory publication no public exploitation of this security vulnerability was known.

The weakness was published 12/12/2019. This vulnerability is known as CVE-2019-13944 since 07/18/2019. The exploitation appears to be easy. The attack can be launched remotely. The exploitation doesn't need any form of authentication. Neither technical details nor an exploit are publicly available. The price for an exploit might be around USD $5k-$25k at the moment (estimation calculated on 03/11/2024). MITRE ATT&CK project uses the attack technique T1006 for this issue.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Similar entries are available at VDB-147084 and VDB-147083. If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Vendor

• Siemens

Name

• EN100 Ethernet Module DNP3
• EN100 Ethernet Module IEC104
• EN100 Ethernet Module IEC 61850
• EN100 Ethernet Module Modbus TCP
• EN100 Ethernet Module PROFINET IO

License

• commercial

Website

• Vendor: https://www.siemens.com/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion