CVE-2018-4840

HIGH

Siemens DIGSI 4 < 4.92 and EN100 Ethernet Modules - Unauthenticated Device Configuration Upload

Title source: llm
STIX 2.1

Description

A vulnerability has been identified in DIGSI 4 (All versions < V4.92), EN100 Ethernet module DNP3 variant (All versions < V1.05.00), EN100 Ethernet module IEC 104 variant (All versions), EN100 Ethernet module IEC 61850 variant (All versions < V4.30), EN100 Ethernet module Modbus TCP variant (All versions), EN100 Ethernet module PROFINET IO variant (All versions). The device engineering mechanism allows an unauthenticated remote user to upload a modified device configuration overwriting access authorization passwords.

References (2)

Core 2
Core References
Third Party Advisory, US Government Resource
https://ics-cert.us-cert.gov/advisories/ICSA-18-067-01
Patch, Vendor Advisory x_refsource_confirm
https://cert-portal.siemens.com/productcert/pdf/ssa-203306.pdf

Scores

CVSS v3 7.5
EPSS 0.0024
EPSS Percentile 47.3%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Details

CWE
CWE-306
Status published
Products (9)
siemens/digsi_4 < 4.92
siemens/en100_ethernet_module_dnp3_firmware
siemens/en100_ethernet_module_iec_104_firmware
siemens/en100_ethernet_module_iec_61850_firmware < 4.30
siemens/en100_ethernet_module_modbus_tcp_firmware
siemens/en100_ethernet_module_profinet_io_firmware
siemens/siprotec_4_7sj66_firmware < 4.30
siemens/siprotec_compact_7sj80_firmware < 4.77
siemens/siprotec_compact_7sk80_firmware < 4.77
Published Mar 08, 2018
Tracked Since Feb 18, 2026