CVE-2018-4858

highPriorität · verfolgen · 32EPSS 0.018 · 78. PerzentilEUUS
grimoire priorityP2 · Scheduled
Exploitable?
—
no known exploitation
Likely / severe?
1.81% (78th) EPSS
CVSS 9.3 · high
Is it mine?
24 products
Prüfe deine Angriffsfläche
Who says so?
4 sources
cnnvd · enisa_euvd · cisa_csaf_ot · nvd

EPSS · bewertet 2026-10-27

A vulnerability has been identified in IEC 61850 system configurator (All versions < V5.80), DIGSI 5 (affected as IEC 61850 system configurator is incorporated) (All versions < V7.80), DIGSI 4 (All versions < V4.93), SICAM PAS/PQS (All versions < V8.11), SICAM PQ Analyzer (All versions < V3.11), SICAM SCC (All versions < V9.02 HF3). A service of the affected products listening on all of the host's network interfaces on either port 4884/TCP, 5885/TCP, or port 5886/TCP could allow an attacker to either exfiltrate limited data from the system or to execute code with Microsoft Windows user permissions. Successful exploitation requires an attacker to be able to send a specially crafted network request to the vulnerable service and a user interacting with the service's client application on the host. In order to execute arbitrary code with Microsoft Windows user permissions, an attacker must be able to plant the code in advance on the host by other means. The vulnerability has limited impact to confidentiality and integrity of the affected system. At the time of advisory publication no public exploitation of this security vulnerability was known. Siemens confirms the security vulnerability and provides mitigations to resolve the security issue.

01

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

  • BehobenDIGSI 4cisa_csaf_ot

    Update to V4.93 - Download: https://support.industry.siemens.com/cs/ww/en/view/109740980

    https://support.industry.siemens.com/cs/ww/en/view/109740980
  • BehobenDIGSI 5 (affected as IEC 61850 system configurator is incorporated)cisa_csaf_ot

    Uninstall IEC 61850 system configurator or update to V7.80 - Download: https://support.industry.siemens.com/cs/ww/en/view/109758531

    https://support.industry.siemens.com/cs/ww/en/view/109758531
  • BehobenIEC 61850 system configuratorcisa_csaf_ot

    Update to V5.80 - Download: https://support.industry.siemens.com/cs/ww/en/view/109740546

    https://support.industry.siemens.com/cs/ww/en/view/109740546
  • BehobenSICAM PAS/PQScisa_csaf_ot

    Update to V8.11 - Download: https://support.industry.siemens.com/cs/us/en/view/109757831

    https://support.industry.siemens.com/cs/us/en/view/109757831
  • BehobenSICAM PQ Analyzercisa_csaf_ot

    Update to V3.11 - Download: https://support.industry.siemens.com/cs/us/en/view/109757833

    https://support.industry.siemens.com/cs/us/en/view/109757833
  • BehobenSICAM SCCcisa_csaf_ot

    Update to V9.02 HF3 - Download: https://support.industry.siemens.com/cs/ww/en/view/109745469

    https://support.industry.siemens.com/cs/ww/en/view/109745469
  • MitigationDIGSI 4cisa_csaf_ot

    Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:5885/TCP or 5886/TCP to localhost (depending on the affected product inuse). Change firewall configuration to restrict access to port 4884/TCP,

  • MitigationDIGSI 5 (affected as IEC 61850 system configurator is incorporated)cisa_csaf_ot

    Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:5885/TCP or 5886/TCP to localhost (depending on the affected product inuse). Change firewall configuration to restrict access to port 4884/TCP,

  • MitigationIEC 61850 system configuratorcisa_csaf_ot

    Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:5885/TCP or 5886/TCP to localhost (depending on the affected product inuse). Change firewall configuration to restrict access to port 4884/TCP,

  • MitigationSICAM PAS/PQScisa_csaf_ot

    Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:5885/TCP or 5886/TCP to localhost (depending on the affected product inuse). Change firewall configuration to restrict access to port 4884/TCP,

  • MitigationSICAM PQ Analyzercisa_csaf_ot

    Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:5885/TCP or 5886/TCP to localhost (depending on the affected product inuse). Change firewall configuration to restrict access to port 4884/TCP,

  • MitigationSICAM SCCcisa_csaf_ot

    Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:5885/TCP or 5886/TCP to localhost (depending on the affected product inuse). Change firewall configuration to restrict access to port 4884/TCP,

02

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

9.3
010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 4.2–9.3

v2.09.3highAV:N/AC:M/Au:N/C:C/I:C/A:Cprimary · NVD / NIST USAusnutzbarkeit 8.6 · Auswirkung 10
v3.17.8highCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:Hprimary · NVD / NIST USAusnutzbarkeit 1.8 · Auswirkung 5.9
v3.04.2mediumCVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:Csecondary · CISA US
v3.17.1highCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)
03

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-284USCWE-284US
04

betroffene Produkte (24)

Betroffene Produkte und Versionsbereiche.

20 von 24 angezeigt
05

Advisories (1)

Hersteller- und Ökosystem-Meldungen dazu.

  • ICSA-18-317-01ICSA-18-317-01 Siemens IEC 61850 System Configurator, DIGSI 5, DIGSI 4, SICAM PAS/PQS, SICAM PQ Analyzer, and SICAM SCC2018-06-26icsa · cisa_csaf_otUS

    CISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.

06

auch bekannt als (3)

Weitere Namen und Kennungen dieser Entität.

07

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvdenisa_euvdcisa_csaf_otnvdNVDCVE.orgMITRE
veröffentlicht 2018-07-09geändert 2026-06-17
08

Referenzen (9)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan