CVE-2018-4858

highpriority · track · 32EPSS 0.018 · 78 %ileEUUS
grimoire priorityP2 · Scheduled
Exploitable?
—
no known exploitation
Likely / severe?
1.81% (78th) EPSS
CVSS 9.3 · high
Is it mine?
24 products
Check your exposure
Who says so?
4 sources
cnnvd · enisa_euvd · cisa_csaf_ot · nvd

EPSS · scored 2026-10-27

A vulnerability has been identified in IEC 61850 system configurator (All versions < V5.80), DIGSI 5 (affected as IEC 61850 system configurator is incorporated) (All versions < V7.80), DIGSI 4 (All versions < V4.93), SICAM PAS/PQS (All versions < V8.11), SICAM PQ Analyzer (All versions < V3.11), SICAM SCC (All versions < V9.02 HF3). A service of the affected products listening on all of the host's network interfaces on either port 4884/TCP, 5885/TCP, or port 5886/TCP could allow an attacker to either exfiltrate limited data from the system or to execute code with Microsoft Windows user permissions. Successful exploitation requires an attacker to be able to send a specially crafted network request to the vulnerable service and a user interacting with the service's client application on the host. In order to execute arbitrary code with Microsoft Windows user permissions, an attacker must be able to plant the code in advance on the host by other means. The vulnerability has limited impact to confidentiality and integrity of the affected system. At the time of advisory publication no public exploitation of this security vulnerability was known. Siemens confirms the security vulnerability and provides mitigations to resolve the security issue.

01

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

  • FixedDIGSI 4cisa_csaf_ot

    Update to V4.93 - Download: https://support.industry.siemens.com/cs/ww/en/view/109740980

    https://support.industry.siemens.com/cs/ww/en/view/109740980
  • FixedDIGSI 5 (affected as IEC 61850 system configurator is incorporated)cisa_csaf_ot

    Uninstall IEC 61850 system configurator or update to V7.80 - Download: https://support.industry.siemens.com/cs/ww/en/view/109758531

    https://support.industry.siemens.com/cs/ww/en/view/109758531
  • FixedIEC 61850 system configuratorcisa_csaf_ot

    Update to V5.80 - Download: https://support.industry.siemens.com/cs/ww/en/view/109740546

    https://support.industry.siemens.com/cs/ww/en/view/109740546
  • FixedSICAM PAS/PQScisa_csaf_ot

    Update to V8.11 - Download: https://support.industry.siemens.com/cs/us/en/view/109757831

    https://support.industry.siemens.com/cs/us/en/view/109757831
  • FixedSICAM PQ Analyzercisa_csaf_ot

    Update to V3.11 - Download: https://support.industry.siemens.com/cs/us/en/view/109757833

    https://support.industry.siemens.com/cs/us/en/view/109757833
  • FixedSICAM SCCcisa_csaf_ot

    Update to V9.02 HF3 - Download: https://support.industry.siemens.com/cs/ww/en/view/109745469

    https://support.industry.siemens.com/cs/ww/en/view/109745469
  • MitigationDIGSI 4cisa_csaf_ot

    Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:5885/TCP or 5886/TCP to localhost (depending on the affected product inuse). Change firewall configuration to restrict access to port 4884/TCP,

  • MitigationDIGSI 5 (affected as IEC 61850 system configurator is incorporated)cisa_csaf_ot

    Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:5885/TCP or 5886/TCP to localhost (depending on the affected product inuse). Change firewall configuration to restrict access to port 4884/TCP,

  • MitigationIEC 61850 system configuratorcisa_csaf_ot

    Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:5885/TCP or 5886/TCP to localhost (depending on the affected product inuse). Change firewall configuration to restrict access to port 4884/TCP,

  • MitigationSICAM PAS/PQScisa_csaf_ot

    Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:5885/TCP or 5886/TCP to localhost (depending on the affected product inuse). Change firewall configuration to restrict access to port 4884/TCP,

  • MitigationSICAM PQ Analyzercisa_csaf_ot

    Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:5885/TCP or 5886/TCP to localhost (depending on the affected product inuse). Change firewall configuration to restrict access to port 4884/TCP,

  • MitigationSICAM SCCcisa_csaf_ot

    Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:5885/TCP or 5886/TCP to localhost (depending on the affected product inuse). Change firewall configuration to restrict access to port 4884/TCP,

02

cvss

Technical severity, 0–10. One row per scoring source.

9.3
010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 4.2–9.3

v2.09.3highAV:N/AC:M/Au:N/C:C/I:C/A:Cprimary · NVD / NIST USexploitability 8.6 · impact 10
v3.17.8highCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:Hprimary · NVD / NIST USexploitability 1.8 · impact 5.9
v3.04.2mediumCVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:Csecondary · CISA US
v3.17.1highCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)
03

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-284USCWE-284US
04

affected products (24)

Products and version ranges known to be affected.

showing 20 of 24
05

advisories (1)

Vendor and ecosystem advisories describing this.

  • ICSA-18-317-01ICSA-18-317-01 Siemens IEC 61850 System Configurator, DIGSI 5, DIGSI 4, SICAM PAS/PQS, SICAM PQ Analyzer, and SICAM SCC2018-06-26icsa · cisa_csaf_otUS

    CISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.

06

also known as (3)

Other names and identifiers for this entity.

07

sources

Which sources assert this record, and when.

cnnvdenisa_euvdcisa_csaf_otnvdNVDCVE.orgMITRE
published 2018-07-09modified 2026-06-17
08

references (9)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan