Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2018-4840

A vulnerability has been identified in DIGSI 4 (All versions < V4.92), EN100 Ethernet module DNP3 variant (All versions < V1.05.00), EN100 Ethernet module IEC 104 variant (All versions), EN100 Ethernet module IEC 61850 variant (All versions < V4.30), EN100 Ethernet module Modbus TCP variant (All versions), EN100 Ethernet module PROFINET IO variant (All versions). The device engineering mechanism allows an unauthenticated remote user to upload a modified device configuration overwriting access authorization passwords.

Security Impact Summary

This vulnerability carries a HIGH severity rating with a CVSS v3.1 score of 7.5, indicating it can be exploited remotely over the network with relatively low complexity without requiring user interaction and does not require pre-existing privileges . The vulnerability impacts integrity (unauthorized modifications), for affected systems. Impacting 17 products from siemens, from siemens, from siemens and 14 others, organizations running these solutions should prioritize assessment and patching.

Historical Context

First disclosed in 2018, this vulnerability was reported during a period defined by widespread IoT adoption challenges, mobile security concerns, and the emergence of advanced persistent threat (APT) techniques. Contemporary mitigation strategies focused on secure development practices and third-party component vetting.

Published

2018-03-08T17:29:00.307

Last Modified

2024-11-21T04:07:33.677

Status

Modified

Source

[email protected]

Severity

CVSSv3.0: 7.5 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: PARTIAL
  • Availability Impact: NONE
Exploitability Score

10.0

Impact Score

2.9

Weaknesses
  • Type: Secondary
    CWE-306
  • Type: Secondary
    CWE-306
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System siemens siprotec_compact_7sj80_firmware < 4.77 Yes
Hardware siemens siprotec_compact_7sj80 - No
Operating System siemens siprotec_compact_7sk80_firmware < 4.77 Yes
Hardware siemens siprotec_compact_7sk80 - No
Operating System siemens siprotec_4_7sj66_firmware < 4.30 Yes
Hardware siemens siprotec_4_7sj66 - No
Operating System siemens digsi_4 < 4.92 Yes
Operating System siemens en100_ethernet_module_iec_104_firmware - Yes
Hardware siemens en100_ethernet_module_iec_104 - No
Operating System siemens en100_ethernet_module_dnp3_firmware - Yes
Hardware siemens en100_ethernet_module_dnp3 - No
Operating System siemens en100_ethernet_module_modbus_tcp_firmware - Yes
Hardware siemens en100_ethernet_module_modbus_tcp - No
Operating System siemens en100_ethernet_module_profinet_io_firmware - Yes
Hardware siemens en100_ethernet_module_profinet_io - No
Operating System siemens en100_ethernet_module_iec_61850_firmware < 4.30 Yes
Hardware siemens en100_ethernet_module_iec_61850 - No
References

How SecUtils Interprets This CVE

SecUtils normalizes and enriches National Vulnerability Database (NVD) records by standardizing vendor and product identifiers, aggregating vulnerability metadata from both NVD and MITRE sources, and providing structured context for security teams. For siemens's affected products, we extract Common Platform Enumeration (CPE) data, Common Weakness Enumeration (CWE) classifications, CVSS severity metrics, and reference data to enable rapid vulnerability prioritization and asset correlation. This record contains no exploit code, proof-of-concept instructions, or attack methodologies—only defensive intelligence necessary for patch management, risk assessment, and security operations.