{"id":"CVE-2015-5374","aliases":["EUVD-2015-5330","GHSA-26f6-7cv9-7mh6"],"status":"published","title":"A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module :...","description":"A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions \u003c V1.04.01; Firmware variant Modbus TCP for EN100 Ethernet module : All versions \u003c V1.11.00; Firmware variant DNP3 TCP for EN100 Ethernet module : All versions \u003c V1.03; Firmware variant IEC 104 for EN100 Ethernet module : All versions \u003c V1.21; EN100 Ethernet module included in SIPROTEC Merging Unit 6MU80 : All versions \u003c 1.02.02. Specially crafted packets sent to port 50000/UDP could cause a denial-of-service of the affected device. A manual reboot may be required to recover the service of the device.","severity":{"version":"2.0","score":7.8,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.74497,"percentile":0.99498,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-19"],"published":"2015-07-18T10:00:00Z","modified":"2026-06-17T00:29:02Z","exploits":[{"source":"exploitdb","id":"EDB-44103","title":"Siemens SIPROTEC 4 and SIPROTEC Compact EN100 Ethernet Module \u003c 4.25 - Denial of Service","type":"dos","platform":"hardware","date":"2018-02-16","url":"https://www.exploit-db.com/exploits/44103"},{"source":"metasploit","id":"auxiliary/dos/scada/siemens_siprotec4","title":"Siemens SIPROTEC 4 and SIPROTEC Compact EN100 Ethernet Module - Denial of Service","type":"auxiliary","verified":true,"url":"https://www.rapid7.com/db/modules/auxiliary/dos/scada/siemens_siprotec4"},{"source":"pocgithub","id":"can/CVE-2015-5374-DoS-PoC","title":"can/CVE-2015-5374-DoS-PoC","date":"2018-02-14","url":"https://github.com/can/CVE-2015-5374-DoS-PoC"}],"products":[{"vendor":"siemens","product":"siprotec_firmware"}],"references":[{"url":"https://www.siemens.com/cert/pool/cert/siemens_security_advisory_SSA-323211.pdf","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-732541.pdf","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/44103/","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-15-202-01","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-17-187-03","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://www.securityfocus.com/bid/75948","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-5374"},{"url":"https://www.exploit-db.com/exploits/44103"},{"url":"https://github.com/advisories/GHSA-26f6-7cv9-7mh6"}],"sources":{"cve":[{"id":"CVE-2015-5374","description":"A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions \u003c V1.04.01; Firmware variant Modbus TCP for EN100 Ethernet module : All versions \u003c V1.11.00; Firmware variant DNP3 TCP for EN100 Ethernet module : All versions \u003c V1.03; Firmware variant IEC 104 for EN100 Ethernet module : All versions \u003c V1.21; EN100 Ethernet module included in SIPROTEC Merging Unit 6MU80 : All versions \u003c 1.02.02. Specially crafted packets sent to port 50000/UDP could cause a denial-of-service of the affected device. A manual reboot may be required to recover the service of the device.","status":"published","published":"2015-07-18T10:00:00Z","modified":"2024-09-17T02:15:53.925Z","updated_at":"2026-11-02T14:35:40.217028Z"}],"euvd":[{"id":"EUVD-2015-5330","description":"A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions \u003c V1.04.01; Firmware variant Modbus TCP for EN100 Ethernet module : All versions \u003c V1.11.00; Firmware variant DNP3 TCP for EN100 Ethernet module : All versions \u003c V1.03; Firmware variant IEC 104 for EN100 Ethernet module : All versions \u003c V1.21; EN100 Ethernet module included in SIPROTEC Merging Unit 6MU80 : All versions \u003c 1.02.02. Specially crafted packets sent to port 50000/UDP could cause a denial-of-service of the affected device. A manual reboot may be required to recover the service of the device.","status":"published","published":"2015-07-18T10:00:00Z","modified":"2024-09-17T02:15:53Z","updated_at":"2026-11-03T00:28:42.412483Z"}],"ghsa":[{"id":"GHSA-26f6-7cv9-7mh6","title":"A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module :...","description":"A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions \u003c V1.04.01; Firmware variant Modbus TCP for EN100 Ethernet module : All versions \u003c V1.11.00; Firmware variant DNP3 TCP for EN100 Ethernet module : All versions \u003c V1.03; Firmware variant IEC 104 for EN100 Ethernet module : All versions \u003c V1.21; EN100 Ethernet module included in SIPROTEC Merging Unit 6MU80 : All versions \u003c 1.02.02. Specially crafted packets sent to port 50000/UDP could cause a denial-of-service of the affected device. A manual reboot may be required to recover the service of the device.","status":"published","published":"2022-05-14T03:35:57Z","modified":"2025-04-12T12:51:13Z","updated_at":"2026-11-02T15:01:22.814855Z"}],"nvd":[{"id":"CVE-2015-5374","description":"A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions \u003c V1.04.01; Firmware variant Modbus TCP for EN100 Ethernet module : All versions \u003c V1.11.00; Firmware variant DNP3 TCP for EN100 Ethernet module : All versions \u003c V1.03; Firmware variant IEC 104 for EN100 Ethernet module : All versions \u003c V1.21; EN100 Ethernet module included in SIPROTEC Merging Unit 6MU80 : All versions \u003c 1.02.02. Specially crafted packets sent to port 50000/UDP could cause a denial-of-service of the affected device. A manual reboot may be required to recover the service of the device.","status":"published","published":"2015-07-18T10:59:04.117Z","modified":"2026-06-17T00:29:02.49Z","cvss":[{"version":"2.0","score":7.8,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-19"],"updated_at":"2026-11-02T14:03:07.96297Z"}]}}