Skip to main content
CVE-2016-7112 Sep 06, 00:59 CRITICAL Act Now

A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions < V1.04.01; Firmware variant Modbus TCP for EN100 Ethernet module : All versions <. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Siemens En100 Ethernet Module Firmware
NVD
CVSS 3.0
9.8
EPSS
0.7%
CVE-2016-7114 Sep 06, 00:59 HIGH This Week

A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions < V1.04.01; Firmware variant Modbus TCP for EN100 Ethernet module : All versions <. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Siemens En100 Ethernet Module Firmware
NVD
CVSS 3.0
8.8
EPSS
0.6%
CVE-2016-7113 Sep 06, 00:59 HIGH This Week

A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions < V1.04.01; Firmware variant Modbus TCP for EN100 Ethernet module : All versions <. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Siemens En100 Ethernet Module Firmware
NVD
CVSS 3.0
7.5
EPSS
0.5%
CVE-2016-7153 Sep 06, 10:59 MEDIUM This Month

The HTTP/2 protocol does not consider the role of the TCP congestion window in providing information about content length, which makes it easier for remote attackers to obtain cleartext data by. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Chrome Google Apple Microsoft +7
NVD
CVSS 3.0
5.3
EPSS
1.3%
CVE-2016-7152 Sep 06, 10:59 MEDIUM This Month

The HTTPS protocol does not consider the role of the TCP congestion window in providing information about content length, which makes it easier for remote attackers to obtain cleartext data by. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Chrome Google Apple Microsoft +6
NVD
CVSS 3.0
5.3
EPSS
1.3%

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy