Known vulnerabilities in EN100 Ethernet module PROFINET IO variant

Vendor: Siemens
Software: EN100 Ethernet module PROFINET IO variant
Software CPE: cpe:2.3:h:siemens:en100_ethernet_module_profinet_io_variant:*:*:*:*:*:*:*:*
Website: https://www.siemens.com/
Total vulnerabilities: 11
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting EN100 Ethernet module PROFINET IO variant EN100 Ethernet module PROFINET IO variant is affected by 11 known vulnerabilities: 2 high, 2 medium, 7 low Critical High Medium Low

Vulnerabilities (11)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU65281 - Memory corruption
CVE-2022-30938		 CWE-119 High
No
No
 - 13.07.2022 SB2022071336
#VU64401 - Memory corruption
CVE-2022-30937		 CWE-119 High
No
No
 - 15.06.2022 SB2022061518
#VU23594 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2019-13944		 CWE-22 Medium
No
No
 - 13.12.2019 SB2019121309
#VU23593 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-13943		 CWE-79 Low
No
No
 - 13.12.2019 SB2019121309
#VU23592 - Memory corruption
CVE-2019-13942		 CWE-119 Medium
No
No
 - 13.12.2019 SB2019121309
#VU17740 - Improper input validation
CVE-2018-16563		 CWE-20 Low
No
No
 - 18.02.2019 SB2019021224
#VU13879 - Improper input validation
CVE-2018-11452		 CWE-20 Low
No
No
 - 16.07.2018 SB2018071605
#VU13878 - Improper input validation
CVE-2018-11451		 CWE-20 Low
No
No
 - 16.07.2018 SB2018071605
#VU10888 - Missing Authentication for Critical Function
CVE-2018-4838		 CWE-306 Low
No
No
 - 09.03.2018 SB2018030904
#VU10887 - Missing Authentication for Critical Function
CVE-2018-4840		 CWE-306 Low
No
No
 - 09.03.2018 SB2018030904
#VU10886 - Inadequate Encryption Strength
CVE-2018-4839		 CWE-326 Low
No
No
 - 09.03.2018 SB2018030904