SIEMENS-SSA-865333 · Published 2022-07-12 · View on Siemens ProductCERT ↗

SSA-865333 V1.0: Memory Corruption Vulnerability in EN100 Ethernet Module

CVSS 7.5 HIGH

Risk Summary

<p> EN100 Ethernet module is affected by memory corruption vulnerability (CVE-2022-30938). </p> <p> Siemens has released an update for the EN100 Ethernet module IEC 61850 variant and recommends to update to the latest version. Siemens recommends specific countermeasures for products where updates are not, or not yet available. </p>

CVEs (1)

CVE-2022-30938

Remediations

Refer to Siemens ProductCERT advisory for patch and remediation guidance.

Affected Vendors

Siemens

Affected Products (1)

Siemens · SSA-865333 V1.0: Memory Corruption Vulnerability in EN100 Ethernet Module See advisory

Get alerted to advisories like this

OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.

Start free trial Learn more