CVE-2016-7112: A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All version...

Security readout for executives and security teams

CVE-2016-7112 affects Siemens EN100 Ethernet module firmware used in SIPROTEC-related industrial systems. An attacker who can reach the device web interface on TCP port 80 could bypass authentication and perform some administrative actions. This is most urgent where these devices are reachable from business networks, remote access paths, or untrusted control-system segments. Exposure requires network access to the device web interface on 80/tcp. Internet exposure is not stated in the sources, but risk increases sharply if industrial networks are flat, remotely accessible, or poorly segmented. Treat as a high-priority OT remediation item if affected Siemens protection or merging-unit equipment is reachable beyond trusted engineering networks. Prioritize exposure reduction first, then firmware updates through normal operational safety processes. Mitigation focus: Upgrade affected firmware to the fixed versions listed by Siemens where applicable.; Restrict access to TCP port 80 on affected EN100 modules.; Place affected devices behind control-system network segmentation and trusted management paths..

Prepared

Jun 13, 2026, 14:13 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.