Skip to content
Fencer Intel
medium 5.3

CVE-2016-4785 json

A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions < V1.04.01; Firmware variant M…

published 2016-05-31 10 y ago modified 2026-06-17 4 mo ago also EUVD-2016-5770

cvss
5.3
version 3.0, NVD
cisa kev
Not listed
not in CISA's catalog
epss
2.7%
EPSS 2.7% chance of exploitation in 30 days, percentile 85%
public exploits
0
none known

Summary

A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions < V1.04.01; Firmware variant Modbus TCP for EN100 Ethernet module : All versions < V1.11.00; Firmware variant DNP3 TCP for EN100 Ethernet module : All versions < V1.03; Firmware variant IEC 104 for EN100 Ethernet module : All versions < V1.21; EN100 Ethernet module included in SIPROTEC Merging Unit 6MU80 : All versions < 1.02.02. The integrated web server (port 80/tcp) of the affected devices could allow remote attackers to obtain a limited amount of device memory content if network access was obtained. This vulnerability only affects EN100 Ethernet module included in SIPROTEC4 and SIPROTEC Compact devices.

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

cisa ICSA-16-140-02 updated cvss 5.3

Siemens SIPROTEC Information Disclosure Vulnerabilities (Update B)

  • Siemens EN100 Ethernet module included in SIPROTEC 4 <=V4.26 Siemens EN100 Ethernet module included in SIPROTEC Compact <=V4.26 Siemens SIPROTEC Compact model 7SJ80 with Ethernet Service Interface on Port A Firmware <=V4.75 Siemens SIPROTEC Compact models 7RW80 with Ethernet Service Interface on Port A Siemens SIPROTEC Compact models 7SJ81 with Ethernet Service Interface on Port A Siemens SIPROTEC Compact models 7SK81 with Ethernet Service Interface on Port A
    affected: mitigation

From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf

cisa ICSA-17-187-03F updated cvss 5.3

ICSA-17-187-03F Siemens SIPROTEC 4 and SIPROTEC Compact (Update F)

  • Siemens EN100 Ethernet module included in SIPROTEC Merging Unit 6MU80 <1.02.02
    affected: mitigation siemens.com
  • Siemens Firmware variant DNP3 TCP for EN100 Ethernet module <V1.03 Siemens Firmware variant IEC 104 for EN100 Ethernet module <V1.21 Siemens Firmware variant Modbus TCP for EN100 Ethernet module <V1.11.00 Siemens Firmware variant PROFINET IO for EN100 Ethernet module <V1.04.01
    affected: vendor fix, mitigation support.industry.siemens.com
  • Siemens SIPROTEC 7SD686 <V_4.03, <V_4.05 Siemens SIPROTEC 7SJ66 <V_4.20, <V_4.30 Siemens SIPROTEC 7SJ686 <V_4.83, <V_4.87 Siemens SIPROTEC 7UT686 <V_4.01, <V_4.02
    affected: mitigation siemens.com

Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf

cisa ICSA-17-334-01 updated cvss 5.3

Siemens SWT3000

  • Siemens IEC 61850 firmware < 4.29.01 Siemens TPOP firmware < 01.01.00
    affected: vendor fix siemens.com

From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf

cisa ICSA-17-187-02 updated cvss 5.3

Siemens Reyrolle

  • Siemens EN100 Ethernet modules as optional for Reyrolle < 4.29.01
    affected: vendor fix

From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf

Exploit prediction

2.68% chance of exploitation in the next 30 days, higher than 85% of all scored CVEs (FIRST EPSS, 2026-11-09).

CVSS scores

assigned by version score vector
NVD 3.0 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
NVD 2.0 5.0 AV:N/AC:L/Au:N/C:P/I:N/A:N

Classification

Weakness
  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.