Siemens SIPROTEC 4, SIPROTEC Compact, DIGSI 4, and EN100 Ethernet Module (Update D)
SIPROTEC 4 and SIPROTEC Compact devices could allow access authorization passwords to be reconstructed or overwritten via engineering mechanisms that involve DIGSI 4 and EN100 Ethernet communication modules. Siemens has released updates for several affected products, and recommends specific countermeasures for the remaining products.
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2018-4840US | high7.5OT erhöht | — | ||
A vulnerability has been identified in DIGSI 4 (All versions < V4.92), EN100 Ethernet module DNP3 variant (All versions < V1.05.00), EN100 Ethernet module IEC 104 variant (All vers… | ||||
| CVE-2018-4839US | medium5.3 | — | ||
A vulnerability has been identified in DIGSI 4 (All versions < V4.92), EN100 Ethernet module DNP3 variant (All versions < V1.05.00), EN100 Ethernet module IEC 104 variant (All vers… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-203306: Password Vulnerabilities in SIPROTEC 4 and SIPROTEC Compact Relay Families - CSAF Versionself
- SSA-203306: Password Vulnerabilities in SIPROTEC 4 and SIPROTEC Compact Relay Families - PDF Versionself
- SSA-203306: Password Vulnerabilities in SIPROTEC 4 and SIPROTEC Compact Relay Families - TXT Versionself
- ICS Advisory ICSA-18-067-01 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-18-067-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (42)
- MitigationDIGSI 4
Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.
- MitigationDIGSI 4
Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.
- MitigationEN100 Ethernet module DNP3 variant
Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.
- MitigationEN100 Ethernet module DNP3 variant
Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.
- MitigationEN100 Ethernet module IEC 104 variant
Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.
- MitigationEN100 Ethernet module IEC 104 variant
Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.
- MitigationEN100 Ethernet module IEC 61850 variant
Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.
- MitigationEN100 Ethernet module IEC 61850 variant
Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.
- MitigationEN100 Ethernet module Modbus TCP variant
Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.
- MitigationEN100 Ethernet module Modbus TCP variant
Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.
- MitigationEN100 Ethernet module PROFINET IO variant
Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.
- MitigationEN100 Ethernet module PROFINET IO variant
Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.
- MitigationOther SIPROTEC 4 relays
Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.
- MitigationOther SIPROTEC Compact relays
Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.
- MitigationSIPROTEC 4 7SD80
Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.
- MitigationSIPROTEC 4 7SJ61
Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.
- MitigationSIPROTEC 4 7SJ62
Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.
- MitigationSIPROTEC 4 7SJ64
Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.
- MitigationSIPROTEC 4 7SJ66
Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.
- MitigationSIPROTEC Compact 7SJ80
Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.
- MitigationSIPROTEC Compact 7SK80
Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.
- Kein Fix verfügbarEN100 Ethernet module IEC 104 variant
Currently no remediation is available
- Kein Fix verfügbarEN100 Ethernet module IEC 104 variant
Currently no remediation is available
- Kein Fix verfügbarEN100 Ethernet module Modbus TCP variant
Currently no remediation is available
- Kein Fix verfügbarEN100 Ethernet module Modbus TCP variant
Currently no remediation is available
- Kein Fix verfügbarEN100 Ethernet module PROFINET IO variant
Currently no remediation is available
- Kein Fix verfügbarEN100 Ethernet module PROFINET IO variant
Currently no remediation is available
- Kein Fix verfügbarOther SIPROTEC 4 relays
Currently no remediation is available
- Kein Fix verfügbarOther SIPROTEC Compact relays
Currently no remediation is available
- BehobenDIGSI 4
Update to V4.92
https://support.industry.siemens.com/cs/ww/en/view/109740980 - BehobenDIGSI 4
Update to V4.92
https://support.industry.siemens.com/cs/ww/en/view/109740980 - BehobenEN100 Ethernet module DNP3 variant
Update to V1.05.00 and configure DIGSI 4 connection password
https://support.industry.siemens.com/cs/us/en/view/109745821 - BehobenEN100 Ethernet module DNP3 variant
Update to V1.05.00 and configure DIGSI 4 connection password
https://support.industry.siemens.com/cs/us/en/view/109745821 - BehobenEN100 Ethernet module IEC 61850 variant
Update to V4.30 and configure DIGSI 4 connection password
https://support.industry.siemens.com/cs/us/en/view/109745821 - BehobenEN100 Ethernet module IEC 61850 variant
Update to V4.30 and configure DIGSI 4 connection password
https://support.industry.siemens.com/cs/us/en/view/109745821 - BehobenSIPROTEC 4 7SD80
Update to V4.70
https://support.industry.siemens.com/cs/us/en/view/109742758 - BehobenSIPROTEC 4 7SJ61
Update to V4.96
https://support.industry.siemens.com/cs/us/en/view/109743551 - BehobenSIPROTEC 4 7SJ62
Update to V4.96
https://support.industry.siemens.com/cs/us/en/view/109743551 - BehobenSIPROTEC 4 7SJ64
Update to V4.96
https://support.industry.siemens.com/cs/us/en/view/109743551 - BehobenSIPROTEC 4 7SJ66
Update to V4.30
https://support.industry.siemens.com/cs/us/en/view/109743555 - BehobenSIPROTEC Compact 7SJ80
Update to V4.77
https://support.industry.siemens.com/cs/us/en/view/109742699 - BehobenSIPROTEC Compact 7SK80
Update to V4.77
https://support.industry.siemens.com/cs/us/en/view/109742712
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan