ICSA-18-067-01

icsaUScisa_csaf_ot

Siemens SIPROTEC 4, SIPROTEC Compact, DIGSI 4, and EN100 Ethernet Module (Update D)

view advisory published 2018-03-08

SIPROTEC 4 and SIPROTEC Compact devices could allow access authorization passwords to be reconstructed or overwritten via engineering mechanisms that involve DIGSI 4 and EN100 Ethernet communication modules. Siemens has released updates for several affected products, and recommends specific countermeasures for the remaining products.

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2018-4840UShigh7.5OT elevated—
A vulnerability has been identified in DIGSI 4 (All versions < V4.92), EN100 Ethernet module DNP3 variant (All versions < V1.05.00), EN100 Ethernet module IEC 104 variant (All vers…
CVE-2018-4839USmedium5.3—
A vulnerability has been identified in DIGSI 4 (All versions < V4.92), EN100 Ethernet module DNP3 variant (All versions < V1.05.00), EN100 Ethernet module IEC 104 variant (All vers…
02

references

External citations — patches, advisories, analysis.

03

remediations (42)

  • MitigationDIGSI 4

    Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.

  • MitigationDIGSI 4

    Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.

  • MitigationEN100 Ethernet module DNP3 variant

    Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.

  • MitigationEN100 Ethernet module DNP3 variant

    Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.

  • MitigationEN100 Ethernet module IEC 104 variant

    Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.

  • MitigationEN100 Ethernet module IEC 104 variant

    Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.

  • MitigationEN100 Ethernet module IEC 61850 variant

    Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.

  • MitigationEN100 Ethernet module IEC 61850 variant

    Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.

  • MitigationEN100 Ethernet module Modbus TCP variant

    Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.

  • MitigationEN100 Ethernet module Modbus TCP variant

    Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.

  • MitigationEN100 Ethernet module PROFINET IO variant

    Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.

  • MitigationEN100 Ethernet module PROFINET IO variant

    Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.

  • MitigationOther SIPROTEC 4 relays

    Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.

  • MitigationOther SIPROTEC Compact relays

    Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.

  • MitigationSIPROTEC 4 7SD80

    Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.

  • MitigationSIPROTEC 4 7SJ61

    Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.

  • MitigationSIPROTEC 4 7SJ62

    Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.

  • MitigationSIPROTEC 4 7SJ64

    Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.

  • MitigationSIPROTEC 4 7SJ66

    Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.

  • MitigationSIPROTEC Compact 7SJ80

    Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.

  • MitigationSIPROTEC Compact 7SK80

    Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.

  • No fix availableEN100 Ethernet module IEC 104 variant

    Currently no remediation is available

  • No fix availableEN100 Ethernet module IEC 104 variant

    Currently no remediation is available

  • No fix availableEN100 Ethernet module Modbus TCP variant

    Currently no remediation is available

  • No fix availableEN100 Ethernet module Modbus TCP variant

    Currently no remediation is available

  • No fix availableEN100 Ethernet module PROFINET IO variant

    Currently no remediation is available

  • No fix availableEN100 Ethernet module PROFINET IO variant

    Currently no remediation is available

  • No fix availableOther SIPROTEC 4 relays

    Currently no remediation is available

  • No fix availableOther SIPROTEC Compact relays

    Currently no remediation is available

  • FixedDIGSI 4

    Update to V4.92

    https://support.industry.siemens.com/cs/ww/en/view/109740980
  • FixedDIGSI 4

    Update to V4.92

    https://support.industry.siemens.com/cs/ww/en/view/109740980
  • FixedEN100 Ethernet module DNP3 variant

    Update to V1.05.00 and configure DIGSI 4 connection password

    https://support.industry.siemens.com/cs/us/en/view/109745821
  • FixedEN100 Ethernet module DNP3 variant

    Update to V1.05.00 and configure DIGSI 4 connection password

    https://support.industry.siemens.com/cs/us/en/view/109745821
  • FixedEN100 Ethernet module IEC 61850 variant

    Update to V4.30 and configure DIGSI 4 connection password

    https://support.industry.siemens.com/cs/us/en/view/109745821
  • FixedEN100 Ethernet module IEC 61850 variant

    Update to V4.30 and configure DIGSI 4 connection password

    https://support.industry.siemens.com/cs/us/en/view/109745821
  • FixedSIPROTEC 4 7SD80

    Update to V4.70

    https://support.industry.siemens.com/cs/us/en/view/109742758
  • FixedSIPROTEC 4 7SJ61

    Update to V4.96

    https://support.industry.siemens.com/cs/us/en/view/109743551
  • FixedSIPROTEC 4 7SJ62

    Update to V4.96

    https://support.industry.siemens.com/cs/us/en/view/109743551
  • FixedSIPROTEC 4 7SJ64

    Update to V4.96

    https://support.industry.siemens.com/cs/us/en/view/109743551
  • FixedSIPROTEC 4 7SJ66

    Update to V4.30

    https://support.industry.siemens.com/cs/us/en/view/109743555
  • FixedSIPROTEC Compact 7SJ80

    Update to V4.77

    https://support.industry.siemens.com/cs/us/en/view/109742699
  • FixedSIPROTEC Compact 7SK80

    Update to V4.77

    https://support.industry.siemens.com/cs/us/en/view/109742712
scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan