Known vulnerabilities in EN100 Ethernet module DNP3 TCP variant

Vendor: Siemens
Software: EN100 Ethernet module DNP3 TCP variant
Software CPE: cpe:2.3:h:siemens:en100_ethernet_module_dnp3_tcp_variant:*:*:*:*:*:*:*:*
Website: https://www.siemens.com/
Total vulnerabilities: 9
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting EN100 Ethernet module DNP3 TCP variant EN100 Ethernet module DNP3 TCP variant is affected by 9 known vulnerabilities: 2 medium, 7 low Critical High Medium Low

Vulnerabilities (9)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU23594 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2019-13944		 CWE-22 Medium
No
No
 - 13.12.2019 SB2019121309
#VU23593 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-13943		 CWE-79 Low
No
No
 - 13.12.2019 SB2019121309
#VU23592 - Memory corruption
CVE-2019-13942		 CWE-119 Medium
No
No
 - 13.12.2019 SB2019121309
#VU17740 - Improper input validation
CVE-2018-16563		 CWE-20 Low
No
No
 - 18.02.2019 SB2019021224
#VU13879 - Improper input validation
CVE-2018-11452		 CWE-20 Low
No
No
 - 16.07.2018 SB2018071605
#VU13878 - Improper input validation
CVE-2018-11451		 CWE-20 Low
No
No
 - 16.07.2018 SB2018071605
#VU10888 - Missing Authentication for Critical Function
CVE-2018-4838		 CWE-306 Low
No
No
 - 09.03.2018 SB2018030904
#VU10887 - Missing Authentication for Critical Function
CVE-2018-4840		 CWE-306 Low
No
No
 - 09.03.2018 SB2018030904
#VU10886 - Inadequate Encryption Strength
CVE-2018-4839		 CWE-326 Low
No
No
 - 09.03.2018 SB2018030904