CVE-2016-4785: A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All version...

Security readout for executives and security teams

Some Siemens SIPROTEC protection devices with affected EN100 Ethernet module firmware can leak a limited amount of device memory through the built-in web server on TCP port 80 when an attacker has network access. Exposure is most likely in substations or OT networks using SIPROTEC4 or SIPROTEC Compact devices with EN100 modules where TCP/80 is reachable from untrusted or broad network segments. Treat as a targeted OT exposure issue. Prioritize sites where protective relay management interfaces are reachable beyond trusted engineering networks, then schedule firmware updates through normal operational change control. Mitigation focus: Identify SIPROTEC4 and SIPROTEC Compact devices with EN100 modules.; Upgrade affected firmware to versions outside the listed vulnerable ranges.; Restrict access to TCP/80 on affected device management interfaces..

Prepared

Jun 13, 2026, 14:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.