CVE-2015-5374
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2015-5374
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions < V1.04.01; Firmware variant Modbus TCP for EN100 Ethernet module : All versions < V1.11.00; Firmware variant DNP3 TCP for EN100 Ethernet module : All versions < V1.03; Firmware variant IEC 104 for EN100 Ethernet module : All versions < V1.21; EN100 Ethernet module included in SIPROTEC Merging Unit 6MU80 : All versions < 1.02.02. Specially crafted packets sent to port 50000/UDP could cause a denial-of-service of the affected device. A manual reboot may be required to recover the service of the device.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Siemens SIPROTEC 4和SIPROTEC Compact EN100模块拒绝服务漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Siemens SIPROTEC 4和SIPROTEC Compact都是德国西门子（Siemens）公司的产品。Siemens SIPROTEC 4是一款具有友好人机界面的多功能继电器系列产品。SIPROTEC Compact是一款微机保护装置。EN100是其中的一个多格式编码器模块。 Siemens SIPROTEC 4和SIPROTEC Compact设备的EN100模块中存在安全漏洞。远程攻击者可通过向UDP 50000端口发送特制的数据包利用该漏洞造成拒绝服务。以下版本受到影响：使用4.25之前
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Shenlong Deep Dive — AI Deep Analysis
10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2015-5374
| # | POC Description | Source Link | Shenlong Link |
|---|---|---|---|
| 1 | CVE-2015-5374 Denial of Service PoC | https://github.com/can/CVE-2015-5374-DoS-PoC | POC Details |
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2015-5374
请登录查看更多情报信息。
- https://ics-cert.us-cert.gov/advisories/ICSA-15-202-01x_refsource_MISC
- https://ics-cert.us-cert.gov/advisories/ICSA-17-187-03x_refsource_MISC
- https://nvd.nist.gov/vuln/detail/CVE-2015-5374
Same Patch Batch · n/a · 2015-07-18 · 5 CVEs total
| CVE-2015-0795 | Micro Focus NetIQ Security Solutions for iSeries 基于栈的缓冲区错误漏洞 | |
| CVE-2015-4280 | Cisco Prime Collaboration Assurance 拒绝服务漏洞 | |
| CVE-2015-4458 | Cisco Adaptive Security Appliances Software 安全漏洞 | |
| CVE-2015-3625 | NVIDIA GPU for FreeBSD驱动程序权限许可和访问控制漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2015-5374
No comments yet