CVE-2016-4784: A vulnerability has been identified in firmware variant PROFINET IO for EN100 Ethernet module : All version...

Security readout for executives and security teams

This CVE affects Siemens EN100 Ethernet modules and several SIPROTEC devices used in power and industrial environments. If an attacker can reach the built-in web server on TCP port 80, they may obtain sensitive device information. The sources do not show active exploitation or provide CVSS scoring. Exposure is most likely in substations or OT networks running affected Siemens EN100 or SIPROTEC firmware with HTTP management reachable from corporate, vendor remote-access, or wider internal networks. Treat this as an OT exposure reduction issue, not an emergency unless affected devices are reachable from broader networks. Prioritize plants or substations where management interfaces are exposed beyond tightly controlled engineering networks. Mitigation focus: Confirm Siemens advisory guidance for the exact device and firmware variant.; Upgrade affected firmware to the listed fixed versions or later.; Restrict access to TCP port 80 management interfaces..

Prepared

Jun 13, 2026, 14:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.