SSA-203306: Password Vulnerabilities in SIPROTEC 4 and SIPROTEC Compact Relay Families
SIPROTEC 4 and SIPROTEC Compact devices could allow access authorization passwords to be reconstructed or overwritten via engineering mechanisms that involve DIGSI 4 and EN100 Ethernet communication modules. Siemens has released updates for several affected products, and recommends specific countermeasures for the remaining products.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2018-4840US | high7.5OT elevated | — | ||
A vulnerability has been identified in DIGSI 4 (All versions < V4.92), EN100 Ethernet module DNP3 variant (All versions < V1.05.00), EN100 Ethernet module IEC 104 variant (All vers… | ||||
| CVE-2018-4839US | medium5.3 | — | ||
A vulnerability has been identified in DIGSI 4 (All versions < V4.92), EN100 Ethernet module DNP3 variant (All versions < V1.05.00), EN100 Ethernet module IEC 104 variant (All vers… | ||||
references
External citations — patches, advisories, analysis.
- SSA-203306: Password Vulnerabilities in SIPROTEC 4 and SIPROTEC Compact Relay Families - CSAF Versionself
- SSA-203306: Password Vulnerabilities in SIPROTEC 4 and SIPROTEC Compact Relay Families - PDF Versionself
- SSA-203306: Password Vulnerabilities in SIPROTEC 4 and SIPROTEC Compact Relay Families - TXT Versionself
remediations (42)
- MitigationDIGSI 4
Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.
- MitigationDIGSI 4
Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.
- MitigationEN100 Ethernet module DNP3 variant
Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.
- MitigationEN100 Ethernet module DNP3 variant
Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.
- MitigationEN100 Ethernet module IEC 104 variant
Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.
- MitigationEN100 Ethernet module IEC 104 variant
Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.
- MitigationEN100 Ethernet module IEC 61850 variant
Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.
- MitigationEN100 Ethernet module IEC 61850 variant
Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.
- MitigationEN100 Ethernet module Modbus TCP variant
Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.
- MitigationEN100 Ethernet module Modbus TCP variant
Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.
- MitigationEN100 Ethernet module PROFINET IO variant
Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.
- MitigationEN100 Ethernet module PROFINET IO variant
Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.
- MitigationOther SIPROTEC 4 relays
Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.
- MitigationOther SIPROTEC Compact relays
Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.
- MitigationSIPROTEC 4 7SD80
Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.
- MitigationSIPROTEC 4 7SJ61
Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.
- MitigationSIPROTEC 4 7SJ62
Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.
- MitigationSIPROTEC 4 7SJ64
Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.
- MitigationSIPROTEC 4 7SJ66
Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.
- MitigationSIPROTEC Compact 7SJ80
Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.
- MitigationSIPROTEC Compact 7SK80
Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.
- No fix availableEN100 Ethernet module IEC 104 variant
Currently no remediation is available
- No fix availableEN100 Ethernet module IEC 104 variant
Currently no remediation is available
- No fix availableEN100 Ethernet module Modbus TCP variant
Currently no remediation is available
- No fix availableEN100 Ethernet module Modbus TCP variant
Currently no remediation is available
- No fix availableEN100 Ethernet module PROFINET IO variant
Currently no remediation is available
- No fix availableEN100 Ethernet module PROFINET IO variant
Currently no remediation is available
- No fix availableOther SIPROTEC 4 relays
Currently no remediation is available
- No fix availableOther SIPROTEC Compact relays
Currently no remediation is available
- FixedDIGSI 4
Update to V4.92
https://support.industry.siemens.com/cs/ww/en/view/109740980 - FixedDIGSI 4
Update to V4.92
https://support.industry.siemens.com/cs/ww/en/view/109740980 - FixedEN100 Ethernet module DNP3 variant
Update to V1.05.00 and configure DIGSI 4 connection password
https://support.industry.siemens.com/cs/us/en/view/109745821 - FixedEN100 Ethernet module DNP3 variant
Update to V1.05.00 and configure DIGSI 4 connection password
https://support.industry.siemens.com/cs/us/en/view/109745821 - FixedEN100 Ethernet module IEC 61850 variant
Update to V4.30 and configure DIGSI 4 connection password
https://support.industry.siemens.com/cs/us/en/view/109745821 - FixedEN100 Ethernet module IEC 61850 variant
Update to V4.30 and configure DIGSI 4 connection password
https://support.industry.siemens.com/cs/us/en/view/109745821 - FixedSIPROTEC 4 7SD80
Update to V4.70
https://support.industry.siemens.com/cs/us/en/view/109742758 - FixedSIPROTEC 4 7SJ61
Update to V4.96
https://support.industry.siemens.com/cs/us/en/view/109743551 - FixedSIPROTEC 4 7SJ62
Update to V4.96
https://support.industry.siemens.com/cs/us/en/view/109743551 - FixedSIPROTEC 4 7SJ64
Update to V4.96
https://support.industry.siemens.com/cs/us/en/view/109743551 - FixedSIPROTEC 4 7SJ66
Update to V4.30
https://support.industry.siemens.com/cs/us/en/view/109743555 - FixedSIPROTEC Compact 7SJ80
Update to V4.77
https://support.industry.siemens.com/cs/us/en/view/109742699 - FixedSIPROTEC Compact 7SK80
Update to V4.77
https://support.industry.siemens.com/cs/us/en/view/109742712
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan