Denial-of-Service Vulnerability in EN100 Ethernet Module by Siemens

CVE-2018-16563

Summary

A vulnerability in the EN100 Ethernet module variants by Siemens allows an attacker to exploit specially crafted packets sent to port 102/tcp, resulting in a denial-of-service condition. This could compromise the availability of network functionality for the affected systems, requiring a manual restart of the EN100 module for recovery. Successful exploitation necessitates network access with IEC 61850-MMS communication enabled, and no user interaction or privileges are needed to execute the attack. At the time of advisory publication, there was no known public exploitation of this vulnerability.

References