{"schemaVersion":3,"id":"CVE-2022-30937","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"A vulnerability has been identified in EN100 Ethernet module DNP3 IP variant (All versions), EN100 Ethernet module IEC 104 variant (All versions), EN100 Ethernet module IEC 61850 variant (All versions < V4.37), EN100 Ethernet module Modbus TCP variant (All versions), EN100 Ethernet module PROFINET IO variant (All versions). Affected applications contains a memory corruption vulnerability while parsing specially crafted HTTP packets to /txtrace endpoint. This could allow an attacker to crash the affected application leading to a denial of service condition.","dates":{"published":"2022-06-14T09:21:54.000Z","modified":"2024-08-03T07:03:39.594Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":7.8,"severity":"high","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:C","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":7.8,"severity":"high","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:C","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.01274,"percentile":0.69486,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0.029999999999999992,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.01244},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.01244,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.01244,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.01244,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.01244,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.01244,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.01244,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.01244,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.01244,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.01244,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.01244,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.01244,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.01244,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.01244,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.01244,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.01244,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.01244,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.01244,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.01244,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.01244,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.01244,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.01244,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.01244,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.01244,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.01244,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.01244,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.01244,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.01244,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.01244,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.01244,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.01274,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.01274,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.01274,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.01274,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.01274,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.01274,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.01274,"percentile":0.69486}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.01244,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.01244,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.01244,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.01244,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.01244,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.01244,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.01244,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.01244,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.01244,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.01244,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.01244,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.01244,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.01244,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.01244,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.01244,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.01244,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.01244,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.01244,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.01244,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.01244,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.01244,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.01244,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.01244,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.01244,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.01274,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.01274,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.01274,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.01274,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.01274,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.01274,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.01274,"percentile":0.69486}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-119","name":"Improper Restriction of Operations within the Bounds of a Memory Buffer","description":"The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.","type":"weakness","status":"Stable","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/119.html"},{"id":"CWE-787","name":"Out-of-bounds Write","description":"The product writes data past the end, or before the beginning, of the intended buffer.","type":"weakness","status":"Draft","abstraction":"Base","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/787.html"}],"affected":[{"vendor":"siemens","product":"en100_ethernet_module_dnp3_firmware","name":"en100 ethernet module dnp3 firmware","label":"en100_ethernet_module_dnp3_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/siemens/en100_ethernet_module_dnp3"},{"vendor":"siemens","product":"en100 ethernet module dnp3 ip variant","name":"EN100 Ethernet module DNP3 IP variant","label":"en100 ethernet module dnp3 ip variant","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":"/vendor/siemens/en100_ethernet_module_dnp3_ip_variant"},{"vendor":"siemens","product":"en100_ethernet_module_iec_104_firmware","name":"en100 ethernet module iec 104 firmware","label":"en100_ethernet_module_iec_104_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/siemens/en100_ethernet_module_iec_104"},{"vendor":"siemens","product":"en100 ethernet module iec 104 variant","name":"EN100 Ethernet module IEC 104 variant","label":"en100 ethernet module iec 104 variant","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":"/vendor/siemens/en100_ethernet_module_iec_104_variant"},{"vendor":"siemens","product":"en100_ethernet_module_iec_61850_firmware","name":"en100 ethernet module iec 61850 firmware","label":"en100_ethernet_module_iec_61850_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 4.37","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.37","eol":null,"hubHref":"/vendor/siemens/en100_ethernet_module_iec_61850"},{"vendor":"siemens","product":"en100 ethernet module iec 61850 variant","name":"EN100 Ethernet module IEC 61850 variant","label":"en100 ethernet module iec 61850 variant","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"All versions < V4.37","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions < V4.37","eol":null,"hubHref":"/vendor/siemens/en100_ethernet_module_iec_61850_variant"},{"vendor":"siemens","product":"en100_ethernet_module_modbus_tcp_firmware","name":"en100 ethernet module modbus tcp firmware","label":"en100_ethernet_module_modbus_tcp_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/siemens/en100_ethernet_module_modbus_tcp"},{"vendor":"siemens","product":"en100 ethernet module modbus tcp variant","name":"EN100 Ethernet module Modbus TCP variant","label":"en100 ethernet module modbus tcp variant","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":"/vendor/siemens/en100_ethernet_module_modbus_tcp_variant"},{"vendor":"siemens","product":"en100_ethernet_module_profinet_io_firmware","name":"en100 ethernet module profinet io firmware","label":"en100_ethernet_module_profinet_io_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/siemens/en100_ethernet_module_profinet_io"},{"vendor":"siemens","product":"en100 ethernet module profinet io variant","name":"EN100 Ethernet module PROFINET IO variant","label":"en100 ethernet module profinet io variant","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":"/vendor/siemens/en100_ethernet_module_profinet_io_variant"}],"affectedCount":10,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-693555.pdf","label":"cert-portal.siemens.com/productcert/pdf/ssa-693555.pdf","hostname":"cert-portal.siemens.com","tags":["X Refsource MISC","Patch","Vendor Advisory"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2022-06-14T09:21:54.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-03T07:03:39.594Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":31,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T23:54:28.241Z","stale":false,"partial":false}}