CVE-2015-5374: A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All version...

Security readout for executives and security teams

CVE-2015-5374 is a denial-of-service issue in several Siemens EN100 Ethernet module firmware variants. Network packets sent to UDP port 50000 can disrupt the affected device, and recovery may require a manual reboot. The business risk is loss of availability in OT environments, not data theft or code execution based on the provided sources. Exposure is most likely where Siemens EN100-based SIPROTEC or 6MU80 devices are reachable on OT networks, especially if UDP port 50000 is accessible from engineering, operations, or less trusted network segments. Prioritize remediation for exposed or operationally critical devices. The vulnerability can cause service loss and may require hands-on recovery, which matters in substations or industrial environments where availability is safety and continuity critical. Mitigation focus: Upgrade affected Siemens EN100 firmware to the fixed versions named in the CVE description.; Restrict UDP port 50000 access to trusted management or OT hosts only.; Segment affected protection and control networks from IT and internet-facing networks..

Prepared

Jun 13, 2026, 22:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.