CVE-2018-4839

lowPriorität · verfolgen · 21EPSS 0.006 · 47. PerzentilDEEURUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.58% (47th) EPSS

CVSS 3.5 · low

Is it mine?

84 products

Prüfe deine Angriffsfläche

Who says so?

5 sources

cnnvd · enisa_euvd · fstec_bdu · cisa_csaf_ot

EPSS · bewertet 2026-10-27

A vulnerability has been identified in DIGSI 4 (All versions < V4.92), EN100 Ethernet module DNP3 variant (All versions < V1.05.00), EN100 Ethernet module IEC 104 variant (All versions), EN100 Ethernet module IEC 61850 variant (All versions < V4.30), EN100 Ethernet module Modbus TCP variant (All versions), EN100 Ethernet module PROFINET IO variant (All versions), Other SIPROTEC 4 relays (All versions), Other SIPROTEC Compact relays (All versions), SIPROTEC 4 7SD80 (All versions < V4.70), SIPROTEC 4 7SJ61 (All versions < V4.96), SIPROTEC 4 7SJ62 (All versions < V4.96), SIPROTEC 4 7SJ64 (All versions < V4.96), SIPROTEC 4 7SJ66 (All versions < V4.30), SIPROTEC Compact 7SJ80 (All versions < V4.77), SIPROTEC Compact 7SK80 (All versions < V4.77). An attacker with local access to the engineering system or in a privileged network position and able to obtain certain network traffic could possibly reconstruct access authorization passwords.

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

BehobenDIGSI 4siemens_psirt
Update to V4.92
https://support.industry.siemens.com/cs/ww/en/view/109740980
BehobenEN100 Ethernet module DNP3 variantsiemens_psirt
Update to V1.05.00 and configure DIGSI 4 connection password
https://support.industry.siemens.com/cs/us/en/view/109745821
BehobenEN100 Ethernet module IEC 61850 variantsiemens_psirt
Update to V4.30 and configure DIGSI 4 connection password
https://support.industry.siemens.com/cs/us/en/view/109745821
BehobenSIPROTEC 4 7SD80siemens_psirt
Update to V4.70
https://support.industry.siemens.com/cs/us/en/view/109742758
BehobenSIPROTEC 4 7SJ61siemens_psirt
Update to V4.96
https://support.industry.siemens.com/cs/us/en/view/109743551
BehobenSIPROTEC 4 7SJ62siemens_psirt
Update to V4.96
https://support.industry.siemens.com/cs/us/en/view/109743551
BehobenSIPROTEC 4 7SJ64siemens_psirt
Update to V4.96
https://support.industry.siemens.com/cs/us/en/view/109743551
BehobenSIPROTEC 4 7SJ66siemens_psirt
Update to V4.30
https://support.industry.siemens.com/cs/us/en/view/109743555
BehobenSIPROTEC Compact 7SJ80siemens_psirt
Update to V4.77
https://support.industry.siemens.com/cs/us/en/view/109742699
BehobenSIPROTEC Compact 7SK80siemens_psirt
Update to V4.77
https://support.industry.siemens.com/cs/us/en/view/109742712
BehobenDIGSI 4cisa_csaf_ot
Update to V4.92
https://support.industry.siemens.com/cs/ww/en/view/109740980
BehobenEN100 Ethernet module DNP3 variantcisa_csaf_ot
Update to V1.05.00 and configure DIGSI 4 connection password
https://support.industry.siemens.com/cs/us/en/view/109745821
BehobenEN100 Ethernet module IEC 61850 variantcisa_csaf_ot
Update to V4.30 and configure DIGSI 4 connection password
https://support.industry.siemens.com/cs/us/en/view/109745821
BehobenSIPROTEC 4 7SD80cisa_csaf_ot
Update to V4.70
https://support.industry.siemens.com/cs/us/en/view/109742758
BehobenSIPROTEC 4 7SJ61cisa_csaf_ot
Update to V4.96
https://support.industry.siemens.com/cs/us/en/view/109743551
BehobenSIPROTEC 4 7SJ62cisa_csaf_ot
Update to V4.96
https://support.industry.siemens.com/cs/us/en/view/109743551
BehobenSIPROTEC 4 7SJ64cisa_csaf_ot
Update to V4.96
https://support.industry.siemens.com/cs/us/en/view/109743551
BehobenSIPROTEC 4 7SJ66cisa_csaf_ot
Update to V4.30
https://support.industry.siemens.com/cs/us/en/view/109743555
BehobenSIPROTEC Compact 7SJ80cisa_csaf_ot
Update to V4.77
https://support.industry.siemens.com/cs/us/en/view/109742699
BehobenSIPROTEC Compact 7SK80cisa_csaf_ot
Update to V4.77
https://support.industry.siemens.com/cs/us/en/view/109742712
MitigationDIGSI 4siemens_psirt
Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.
MitigationEN100 Ethernet module DNP3 variantsiemens_psirt
Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.
MitigationEN100 Ethernet module IEC 104 variantsiemens_psirt
Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.
MitigationEN100 Ethernet module IEC 61850 variantsiemens_psirt
Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.
MitigationEN100 Ethernet module Modbus TCP variantsiemens_psirt
Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.
MitigationEN100 Ethernet module PROFINET IO variantsiemens_psirt
Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.
MitigationOther SIPROTEC 4 relayssiemens_psirt
Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.
MitigationOther SIPROTEC Compact relayssiemens_psirt
Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.
MitigationSIPROTEC 4 7SD80siemens_psirt
Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.
MitigationSIPROTEC 4 7SJ61siemens_psirt
Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.
MitigationSIPROTEC 4 7SJ62siemens_psirt
Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.
MitigationSIPROTEC 4 7SJ64siemens_psirt
Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.
MitigationSIPROTEC 4 7SJ66siemens_psirt
Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.
MitigationSIPROTEC Compact 7SJ80siemens_psirt
Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.
MitigationSIPROTEC Compact 7SK80siemens_psirt
Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.
MitigationDIGSI 4cisa_csaf_ot
Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.
MitigationEN100 Ethernet module DNP3 variantcisa_csaf_ot
Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.
MitigationEN100 Ethernet module IEC 104 variantcisa_csaf_ot
Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.
MitigationEN100 Ethernet module IEC 61850 variantcisa_csaf_ot
Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.
MitigationEN100 Ethernet module Modbus TCP variantcisa_csaf_ot
Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.
MitigationEN100 Ethernet module PROFINET IO variantcisa_csaf_ot
Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.
MitigationOther SIPROTEC 4 relayscisa_csaf_ot
Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.
MitigationOther SIPROTEC Compact relayscisa_csaf_ot
Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.
MitigationSIPROTEC 4 7SD80cisa_csaf_ot
Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.
MitigationSIPROTEC 4 7SJ61cisa_csaf_ot
Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.
MitigationSIPROTEC 4 7SJ62cisa_csaf_ot
Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.
MitigationSIPROTEC 4 7SJ64cisa_csaf_ot
Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.
MitigationSIPROTEC 4 7SJ66cisa_csaf_ot
Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.
MitigationSIPROTEC Compact 7SJ80cisa_csaf_ot
Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.
MitigationSIPROTEC Compact 7SK80cisa_csaf_ot
Apply secure substation concept and Defense-in-Depth (see https://www.siemens.com/gridsecurity) or contact customer care to find specific solutions.
Kein Fix verfügbarEN100 Ethernet module IEC 104 variantsiemens_psirt
Currently no remediation is available
Kein Fix verfügbarEN100 Ethernet module Modbus TCP variantsiemens_psirt
Currently no remediation is available
Kein Fix verfügbarEN100 Ethernet module PROFINET IO variantsiemens_psirt
Currently no remediation is available
Kein Fix verfügbarOther SIPROTEC 4 relayssiemens_psirt
Currently no remediation is available
Kein Fix verfügbarOther SIPROTEC Compact relayssiemens_psirt
Currently no remediation is available
Kein Fix verfügbarEN100 Ethernet module IEC 104 variantcisa_csaf_ot
Currently no remediation is available
Kein Fix verfügbarEN100 Ethernet module Modbus TCP variantcisa_csaf_ot
Currently no remediation is available
Kein Fix verfügbarEN100 Ethernet module PROFINET IO variantcisa_csaf_ot
Currently no remediation is available
Kein Fix verfügbarOther SIPROTEC 4 relayscisa_csaf_ot
Currently no remediation is available
Kein Fix verfügbarOther SIPROTEC Compact relayscisa_csaf_ot
Currently no remediation is available

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

5.3

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · low–medium · 3.5–5.3

v2.03.5lowAV:N/AC:M/Au:S/C:P/I:N/A:Nprimary · NVD / NIST USAusnutzbarkeit 6.8 · Auswirkung 2.9

v3.05.3mediumCVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:Nprimary · NVD / NIST USAusnutzbarkeit 1.6 · Auswirkung 3.6

v3.04.9mediumCVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:Usecondary · CVSS-BT (t0sche)

v3.14mediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N/E:P/RL:O/RC:Csecondary · CISA US

v3.15.3mediumAV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:Nsecondary · FSTEC (BDU) RU

v3.14mediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N/E:P/RL:O/RC:Csecondary · Siemens ProductCERT DE

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-285USCWE-326USCWE-326USCWE-326US

betroffene Produkte (84)

Betroffene Produkte und Versionsbereiche.

DIGSI 4alle Versionencisa_csaf_otUS
EN100 Ethernet module DNP3 variantalle Versionencisa_csaf_otUS
EN100 Ethernet module IEC 104 variantalle Versionencisa_csaf_otUS
EN100 Ethernet module IEC 61850 variantalle Versionencisa_csaf_otUS
EN100 Ethernet module Modbus TCP variantalle Versionencisa_csaf_otUS
EN100 Ethernet module PROFINET IO variantalle Versionencisa_csaf_otUS
Other SIPROTEC 4 relaysalle Versionencisa_csaf_otUS
Other SIPROTEC Compact relaysalle Versionencisa_csaf_otUS
SIPROTEC 4 7SD80alle Versionencisa_csaf_otUS
SIPROTEC 4 7SJ61alle Versionencisa_csaf_otUS
SIPROTEC 4 7SJ62alle Versionencisa_csaf_otUS
SIPROTEC 4 7SJ64alle Versionencisa_csaf_otUS
SIPROTEC 4 7SJ66alle Versionencisa_csaf_otUS
SIPROTEC Compact 7SJ80alle Versionencisa_csaf_otUS
SIPROTEC Compact 7SK80alle Versionencisa_csaf_otUS
Siemens DIGSI 4< V4.92cisa_csaf_otUS
Siemens EN100 Ethernet module DNP3 variant< V1.05.00cisa_csaf_otUS
Siemens EN100 Ethernet module IEC 104 variant≤ vers:all/*cisa_csaf_otUS
Siemens EN100 Ethernet module IEC 61850 variant< V4.30cisa_csaf_otUS
Siemens EN100 Ethernet module Modbus TCP variant≤ vers:all/*cisa_csaf_otUS

20 von 84 angezeigt

Advisories (2)

Hersteller- und Ökosystem-Meldungen dazu.

SSA-203306SSA-203306: Password Vulnerabilities in SIPROTEC 4 and SIPROTEC Compact Relay Families2018-03-08csaf · siemens_psirtDE
SIPROTEC 4 and SIPROTEC Compact devices could allow access authorization passwords to be reconstructed or overwritten via engineering mechanisms that involve DIGSI 4 and EN100 Ethernet communication modules. Siemens has released updates for several affected products, and recommends specific countermeasures for the remaining products.
ICSA-18-067-01Siemens SIPROTEC 4, SIPROTEC Compact, DIGSI 4, and EN100 Ethernet Module (Update D)2018-03-08icsa · cisa_csaf_otUS
SIPROTEC 4 and SIPROTEC Compact devices could allow access authorization passwords to be reconstructed or overwritten via engineering mechanisms that involve DIGSI 4 and EN100 Ethernet communication modules. Siemens has released updates for several affected products, and recommends specific countermeasures for the remaining products.

auch bekannt als (7)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd fstec_bdu cisa_csaf_ot siemens_psirt NVD CVE.org MITRE

veröffentlicht 2018-03-08geändert 2026-06-17

Referenzen (5)

Externe Belege — Patches, Meldungen, Analysen.

https://cert-portal.siemens.com/productcert/pdf/ssa-203306.pdf cnnvd
https://ics-cert.us-cert.gov/advisories/ICSA-18-067-01 cnnvd
https://cert-portal.siemens.com/productcert/pdf/ssa-203306.pdf enisa_euvd
https://cert-portal.siemens.com/productcert/pdf/ssa-203306.pdfPatchVendor Advisorynvd
https://ics-cert.us-cert.gov/advisories/ICSA-18-067-01Third Party AdvisoryUS Government Resourcenvd

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan