CVE-2016-7114: A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All version...

Security readout for executives and security teams

This affects Siemens EN100 Ethernet modules and SIPROTEC devices used in industrial power environments. If an attacker can reach the web interface and a real user is logged in, authentication may be bypassed to perform some administrative actions. Treat as high priority for exposed OT networks, but the provided sources do not state public exploitation. Exposure is limited to organizations operating the listed Siemens EN100 firmware variants or SIPROTEC 6MU80, 7SJ686, 7UT686, 7SD686, and 7SJ66 devices below the fixed version thresholds. Internet exposure is not required; reachable OT management networks are enough. Prioritize remediation for devices reachable from broad OT or enterprise networks. The flaw has operational significance because administrative actions on protection and communication equipment can affect availability, but the sources show preconditions and do not confirm exploitation. Mitigation focus: Upgrade affected firmware to Siemens' listed non-vulnerable versions or later.; Restrict web interface access to trusted management hosts and OT administration networks.; Avoid exposing port 80/tcp from these devices to broader enterprise or internet networks..

Prepared

Jun 13, 2026, 13:39 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.