CVE:CVE-2018-16563
CNNVD:CNNVD-201902-537
Siemens EN100 Ethernet Communication module和SIPROTEC 5 Relays中存在安全漏洞。攻击者可通过向受影响设备或模块发送多个数据包利用该漏洞造成拒绝服务。以下产品和版本受到影响：Siemens IEC 61850 for EN100 Ethernet module 4.35之前版本；MODBUS TCP for EN100 Ethernet module（所有版本）；DNP3 TCP for EN100 Ethernet module（所有版本）；IEC104 for EN100 Ethernet module（所有版本）；Profinet IO for EN100 Ethernet module（所有版本）；SIPROTEC 5 relays（带有CP300、CP100）
solution:Upgrade siemens siprotec_5_with_cpu_variant_cp100 to a higher version than 7.82,and avoid the version (,7.82); Upgrade siemens siprotec_5_with_cpu_variant_cp200 to a higher version than 7.58,and avoid the version (,7.58); Upgrade siemens siprotec_5_with_cpu_variant_cp300 to a higher version than 7.82,and avoid the version (,7.82); Upgrade siemens en100_ethernet_module_firmware to a higher version than -; Upgrade siemens en100_ethernet_module_with_firmware_variant_dnp3_tcp to a higher version than -; Upgrade siemens en100_ethernet_module_with_firmware_variant_iec_61850 to a higher version than 4.35,and avoid the version 4.35; Upgrade siemens en100_ethernet_module_with_firmware_variant_iec104 to a higher version than -; Upgrade siemens en100_ethernet_module_with_firmware_variant_modbus_tcp to a higher version than -; Upgrade siemens en100_ethernet_module_with_firmware_variant_profinet_io to a higher version than -