CVE Database
/

CVE-2022-30937

Back to search

CVE-2022-30937

Published: Jun 14, 2022

Modified: Aug 3, 2024

PUBLISHED

Description

A vulnerability has been identified in EN100 Ethernet module DNP3 IP variant (All versions), EN100 Ethernet module IEC 104 variant (All versions), EN100 Ethernet module IEC 61850 variant (All versions < V4.37), EN100 Ethernet module Modbus TCP variant (All versions), EN100 Ethernet module PROFINET IO variant (All versions). Affected applications contains a memory corruption vulnerability while parsing specially crafted HTTP packets to /txtrace endpoint. This could allow an attacker to crash the affected application leading to a denial of service condition.

VendorProductVersions

Siemens

EN100 Ethernet module DNP3 IP variant

affected
All versions

Siemens

EN100 Ethernet module IEC 104 variant

affected
All versions

Siemens

EN100 Ethernet module IEC 61850 variant

affected
All versions < V4.37

Siemens

EN100 Ethernet module Modbus TCP variant

affected
All versions

Siemens

EN100 Ethernet module PROFINET IO variant

affected
All versions

Weaknesses (CWE)

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now