SIEMENS-SSA-693555 · Published 2022-06-14 · View on Siemens ProductCERT ↗

SSA-693555 V1.0: Memory Corruption Vulnerability in EN100 Ethernet Module

CVSS 7.5 HIGH

Risk Summary

<p>EN100 Ethernet module is affected by memory corruption vulnerability (CVE-2022-30937).</p> <p>Siemens has released an update for the EN100 Ethernet module IEC 61850 variant and recommends to update to the latest version. Siemens recommends specific countermeasures for products where updates are not, or not yet available.</p>

CVEs (1)

CVE-2022-30937

Remediations

Refer to Siemens ProductCERT advisory for patch and remediation guidance.

Affected Vendors

Siemens

Affected Products (1)

Siemens · SSA-693555 V1.0: Memory Corruption Vulnerability in EN100 Ethernet Module See advisory

Get alerted to advisories like this

OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.

Start free trial Learn more