CVE-2018-4838

HIGH

Siemens EN100 Ethernet Module - Unauthenticated Firmware Upgrade/Downgrade via Web Interface

Title source: llm

Description

A vulnerability has been identified in EN100 Ethernet module IEC 61850 variant (All versions < V4.30), EN100 Ethernet module DNP3 variant (All versions < V1.04), EN100 Ethernet module PROFINET IO variant (All versions), EN100 Ethernet module Modbus TCP variant (All versions), EN100 Ethernet module IEC 104 variant (All versions < V1.22). The web interface (TCP/80) of affected devices allows an unauthenticated user to upgrade or downgrade the firmware of the device, including to older versions with known vulnerabilities.

References (3)

Core 3

Core References

Third Party Advisory, US Government Resource

https://ics-cert.us-cert.gov/advisories/ICSA-18-067-01

Patch, Vendor Advisory x_refsource_confirm

https://cert-portal.siemens.com/productcert/pdf/ssa-845879.pdf

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

https://www.securityfocus.com/bid/103379

Scores

CVSS v3 7.5

EPSS 0.0025

EPSS Percentile 48.8%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Details

CWE

CWE-306

Status published

Products (5)

siemens/en100_ethernet_module_dnp3_firmware

siemens/en100_ethernet_module_iec_104_firmware

siemens/en100_ethernet_module_iec_61850_firmware < 4.30

siemens/en100_ethernet_module_modbus_tcp_firmware

siemens/en100_ethernet_module_profinet_io_firmware

Published Mar 08, 2018

Tracked Since Feb 18, 2026