ICSA-18-067-02_Siemens SIPROTEC 4, SIPROTEC Compact, and Reyrolle Devices using the EN100 Ethernet Communication Module Extension (Update B)
Ilya Karpov and Dmitry Sklyarov from Positive Technologies reported this vulnerability to Siemens.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2018-4838US | high7.5OT elevated | — | ||
A vulnerability has been identified in EN100 Ethernet module IEC 61850 variant (All versions < V4.30), EN100 Ethernet module DNP3 variant (All versions < V1.04), EN100 Ethernet mod… | ||||
references
External citations — patches, advisories, analysis.
remediations (5)
- MitigationEN100 Ethernet module DNP3 variant
For all other affected products, Siemens has identified the following specific workarounds and mitigations that users can apply to reduce the risk. As a general security measure Siemens strongly recommends to protect network access with appropriate mechanisms (e.g., firewalls, segmentation, VPN). It is advised to configure the environment according to Siemens ' operational guidelines in order to run the devices in a protected IT environment.
- MitigationEN100 Ethernet module IEC 104 variant
For all other affected products, Siemens has identified the following specific workarounds and mitigations that users can apply to reduce the risk. As a general security measure Siemens strongly recommends to protect network access with appropriate mechanisms (e.g., firewalls, segmentation, VPN). It is advised to configure the environment according to Siemens ' operational guidelines in order to run the devices in a protected IT environment.
- MitigationEN100 Ethernet module IEC 61850 variant
For all other affected products, Siemens has identified the following specific workarounds and mitigations that users can apply to reduce the risk. As a general security measure Siemens strongly recommends to protect network access with appropriate mechanisms (e.g., firewalls, segmentation, VPN). It is advised to configure the environment according to Siemens ' operational guidelines in order to run the devices in a protected IT environment.
- MitigationEN100 Ethernet module Modbus TCP variant
For all other affected products, Siemens has identified the following specific workarounds and mitigations that users can apply to reduce the risk. As a general security measure Siemens strongly recommends to protect network access with appropriate mechanisms (e.g., firewalls, segmentation, VPN). It is advised to configure the environment according to Siemens ' operational guidelines in order to run the devices in a protected IT environment.
- MitigationEN100 Ethernet module PROFINET IO variant
For all other affected products, Siemens has identified the following specific workarounds and mitigations that users can apply to reduce the risk. As a general security measure Siemens strongly recommends to protect network access with appropriate mechanisms (e.g., firewalls, segmentation, VPN). It is advised to configure the environment according to Siemens ' operational guidelines in order to run the devices in a protected IT environment.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan