Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2016-4784

EPSS 2.40% · P85
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2016-4784

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
A vulnerability has been identified in firmware variant PROFINET IO for EN100 Ethernet module : All versions < V1.04.01; Firmware variant Modbus TCP for EN100 Ethernet module : All versions < V1.11.00; Firmware variant DNP3 TCP for EN100 Ethernet module : All versions < V1.03; Firmware variant IEC 104 for EN100 Ethernet module : All versions < V1.21; EN100 Ethernet module included in SIPROTEC Merging Unit 6MU80 : All versions < 1.02.02; SIPROTEC 7SJ686 : All versions < V 4.83; SIPROTEC 7UT686 : All versions < V 4.01; SIPROTEC 7SD686 : All versions < V 4.03; SIPROTEC 7SJ66 : All versions < V 4.20. The integrated web server (port 80/tcp) of the affected devices could allow remote attackers to obtain sensitive device information if network access was obtained.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Siemens SIPROTEC 4和SIPROTEC Compact 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Siemens SIPROTEC 4和SIPROTEC Compact都是德国西门子（Siemens）公司的产品。Siemens SIPROTEC 4是一款具有友好人机界面的多功能继电器系列产品。SIPROTEC Compact是一款微机保护装置。EN100是其中的一个多格式编码器模块。 SIPROTEC 4和SIPROTEC Compact的集成Web服务器中存在安全漏洞。远程攻击者可通过发送HTTP请求利用该漏洞获取敏感的设备信息。以下产品及版本受到影响：SIPROTEC 4和SIPROTEC Com
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2016-4784

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2016-4784

请登录查看更多情报信息。

Same Patch Batch · n/a · 2016-05-31 · 15 CVEs total

CVE-2016-0875Moxa EDR-G903 安全漏洞
CVE-2016-0876Moxa EDR-G903 安全漏洞
CVE-2016-0877Moxa EDR-G903 安全漏洞
CVE-2016-0878Moxa EDR-G903 拒绝服务漏洞
CVE-2016-0879Moxa EDR-G903 安全漏洞
CVE-2016-2285多款Moxa产品跨站请求伪造漏洞
CVE-2016-2286多款Moxa产品安全漏洞
CVE-2016-2295多款Moxa产品信息泄露漏洞
CVE-2016-4501Environmental Systems Corporation 8832 Data Controller 安全漏洞
CVE-2016-4502Environmental Systems Corporation 8832 Data Controller 安全漏洞
CVE-2016-4505Resource Data Management Intuitive 650 TDB Controller 安全漏洞
CVE-2016-4506Resource Data Management Intuitive 650 TDB Controller 跨站请求伪造漏洞
CVE-2016-4521Red Lion Sixnet BT-5xxx和BT-6xxx M2M 安全漏洞
CVE-2016-4785Siemens SIPROTEC 4和SIPROTEC Compact EN100 Ethernet模块安全漏洞

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2016-4784

No comments yet

Leave a comment