CVE-2017-12737
N/A
N/A
Summary
An issue was discovered on Siemens SICAM RTUs SM-2556 COM Modules with the firmware variants ENOS00, ERAC00, ETA2, ETLS00, MODi00, and DNPi00. The integrated web server (port 80/tcp) of the affected devices could allow unauthenticated remote attackers to obtain sensitive device information over the network.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | Siemens SICAM RTUs SM-2556 COM Modules with the firmware variants ENOS00, ERAC00, ETA2, ETLS00, MODi00, and DNPi00 | Siemens SICAM RTUs SM-2556 COM Modules with the firmware variants ENOS00, ERAC00, ETA2, ETLS00, MODi00, and DNPi00 | affected |
Weaknesses
- leak of sensitive device information
ADP Enrichment
CVE Program Container
Additional References
- https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-164516.pdf
- http://www.securityfocus.com/bid/101884
References
- https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-164516.pdf
- http://www.securityfocus.com/bid/101884
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.