CVE-2015-5374
EXPLOITEDSiemens SIPROTEC 4 and SIPROTEC Compact EN100 Ethernet Module - Denial of Service
Title source: metasploitExploitation Summary
CVE-2015-5374 has been observed exploited in the wild (reported by VulnCheck KEV).
EIP tracks 3 public exploits from researchers including M. Can Kurnaz, can, including a Metasploit module auxiliary/dos/scada/siemens_siprotec4.
AI-analyzed exploit summary This exploit sends a malformed UDP packet to port 50000 of Siemens SIPROTEC devices with EN100 Ethernet module versions prior to V4.25, causing a denial of service. The payload is a hex-encoded bytearray designed to trigger the vulnerability.
Description
A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions < V1.04.01; Firmware variant Modbus TCP for EN100 Ethernet module : All versions < V1.11.00; Firmware variant DNP3 TCP for EN100 Ethernet module : All versions < V1.03; Firmware variant IEC 104 for EN100 Ethernet module : All versions < V1.21; EN100 Ethernet module included in SIPROTEC Merging Unit 6MU80 : All versions < 1.02.02. Specially crafted packets sent to port 50000/UDP could cause a denial-of-service of the affected device. A manual reboot may be required to recover the service of the device.
Exploits (3)
This exploit sends a malformed UDP packet to port 50000 of Siemens SIPROTEC devices with EN100 Ethernet module versions prior to V4.25, causing a denial of service. The payload is a hex-encoded bytearray designed to trigger the vulnerability.
This repository contains a functional proof-of-concept exploit for CVE-2015-5374, a denial-of-service vulnerability in Siemens SIPROTEC 4 and SIPROTEC Compact EN100 Ethernet Module versions prior to V4.25. The exploit sends a specially crafted UDP packet to port 50000, causing the device to crash and require a manual reboot.
This Metasploit module exploits a denial-of-service vulnerability in Siemens SIPROTEC 4 and SIPROTEC Compact devices by sending a malformed UDP packet to port 50000. The vulnerability (CVE-2015-5374) causes the device to crash, requiring a manual reboot.