CVE-2015-5374

A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions < V1.04.01; Firmware variant Modbus TCP for EN100 Ethernet module : All versions < V1.11.00; Firmware variant DNP3 TCP for EN100 Ethernet module : All versions < V1.03; Firmware variant IEC 104 for EN100 Ethernet module : All versions < V1.21; EN100 Ethernet module included in SIPROTEC Merging Unit 6MU80 : All versions < 1.02.02. Specially crafted packets sent to port 50000/UDP could cause a denial-of-service of the affected device. A manual reboot may be required to recover the service of the device.

• CWE-19

• http://www.securityfocus.com/bid/75948
• http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-732541.pdfPatch, Vendor Advisory
• https://ics-cert.us-cert.gov/advisories/ICSA-15-202-01
• https://ics-cert.us-cert.gov/advisories/ICSA-17-187-03
• https://www.exploit-db.com/exploits/44103/
• https://www.siemens.com/cert/pool/cert/siemens_security_advisory_SSA-323211.pdf
• http://www.securityfocus.com/bid/75948
• http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-732541.pdfPatch, Vendor Advisory
• https://ics-cert.us-cert.gov/advisories/ICSA-15-202-01
• https://ics-cert.us-cert.gov/advisories/ICSA-17-187-03
• https://www.exploit-db.com/exploits/44103/
• https://www.siemens.com/cert/pool/cert/siemens_security_advisory_SSA-323211.pdf

Published

Jul 18, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-5367The HP lt4112 LTE/HSPA+ Gobi 4G module with firmware before …
• CVE-2015-5368The HP lt4112 LTE/HSPA+ Gobi 4G module with firmware before …
• CVE-2015-5369Pulse Connect Secure (aka PCS and formerly Juniper PCS) PSC6…
• CVE-2015-5370Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4…
• CVE-2015-5371The AuthenticationFilter class in SolarWinds Storage Manager…
• CVE-2015-5372The SAML 2.0 implementation in AdNovum nevisAuth 4.13.0.0 be…
• CVE-2015-5375Cross-site scripting (XSS) vulnerability in unspecified dial…
• CVE-2015-5376SQL injection vulnerability in the login form in GSI WiNPAT …
• CVE-2015-5377Elasticsearch before 1.6.1 allows remote attackers to execut…
• CVE-2015-5378Logstash 1.5.x before 1.5.3 and 1.4.x before 1.4.4 allows re…
• CVE-2015-5379Cross-site scripting (XSS) vulnerability in actions.hsp in t…
• CVE-2015-5380The Utf8DecoderBase::WriteUtf16Slow function in unicode-deco…