CVE-2016-7114

A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions < V1.04.01; Firmware variant Modbus TCP for EN100 Ethernet module : All versions < V1.11.00; Firmware variant DNP3 TCP for EN100 Ethernet module : All versions < V1.03; Firmware variant IEC 104 for EN100 Ethernet module : All versions < V1.21; EN100 Ethernet module included in SIPROTEC Merging Unit 6MU80 : All versions < 1.02.02; SIPROTEC 7SJ686 : All versions < V 4.87; SIPROTEC 7UT686 : All versions < V 4.02; SIPROTEC 7SD686 : All versions < V 4.05; SIPROTEC 7SJ66 : All versions < V 4.30. Attackers with network access to the device's web interface (port 80/tcp) could possibly circumvent authentication and perform certain administrative operations. A legitimate user must be logged into the web interface for the attack to be successful.

• CWE-287

• http://www.securityfocus.com/bid/92745
• http://www.securityfocus.com/bid/99471
• http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-630413.pdfVendor Advisory
• https://ics-cert.us-cert.gov/advisories/ICSA-17-187-03
• https://www.siemens.com/cert/pool/cert/siemens_security_advisory_SSA-323211.pdf
• http://www.securityfocus.com/bid/92745
• http://www.securityfocus.com/bid/99471
• http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-630413.pdfVendor Advisory
• https://ics-cert.us-cert.gov/advisories/ICSA-17-187-03
• https://www.siemens.com/cert/pool/cert/siemens_security_advisory_SSA-323211.pdf

Published

Sep 6, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-7108Huawei Unified Maintenance Audit (UMA) before V200R001C00SPC…
• CVE-2016-7109Huawei Unified Maintenance Audit (UMA) before V200R001C00SPC…
• CVE-2016-7110Huawei Unified Maintenance Audit (UMA) before V200R001C00SPC…
• CVE-2016-7111MantisBT before 1.3.1 and 2.x before 2.0.0-beta.2 uses a wea…
• CVE-2016-7112A vulnerability has been identified in Firmware variant PROF…
• CVE-2016-7113A vulnerability has been identified in Firmware variant PROF…
• CVE-2016-7115Buffer overflow in the handle_packet function in mactelnet.c…
• CVE-2016-7116Directory traversal vulnerability in hw/9pfs/9p.c in QEMU (a…6
• CVE-2016-7117Use-after-free vulnerability in the __sys_recvmmsg function …9.8
• CVE-2016-7118fs/fcntl.c in the "aufs 3.2.x+setfl-debian" patch in the lin…
• CVE-2016-7119Cross-site scripting (XSS) vulnerability in the user-profile…
• CVE-2016-7122The avi_read_nikon function in libavformat/avidec.c in FFmpe…