ICSA-19-038-02 Siemens EN100 Ethernet Module

CVSS 7.5 HIGH

CVEs (2)

CVE-2018-11451 CVE-2018-11452

Update to V4.33. Applying the update causes the module to go through a single restart cycle. - Download: https://support.industry.siemens.com/cs/us/en/view/109745821
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Block access to port 102/TCP e.g. with an external firewall.

Siemens

Siemens · Firmware variant IEC 61850 for EN100 Ethernet module <V4.33

Multiple

OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.