CVE-2018-4838: High severity siemens en100 ethernet module vulnerability
A vulnerability has been identified in EN100 Ethernet module IEC 61850 variant (All versions < V4.30), EN100 Ethernet module DNP3 variant (All versions < V1.04), EN100 Ethernet module PROFINET IO variant (All versions), EN100 Ethernet module Modbus TCP variant (All versions), EN100 Ethernet module IEC 104 variant (All versions < V1.22). The web interface (TCP/80) of affected devices allows an unauthenticated user to upgrade or downgrade the firmware of the device, including to older versions with known vulnerabilities.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2018-4838.
What is the severity of CVE-2018-4838?
The severity of CVE-2018-4838 is high with a CVSS score of 7.5.
Which software versions are affected by CVE-2018-4838?
CVE-2018-4838 affects all versions of EN100 Ethernet module IEC 61850 variant below V4.30, EN100 Ethernet module DNP3 variant below V1.04, EN100 Ethernet module PROFINET IO variant (all versions), and EN100 Ethernet module Modbus TCP variant (all versions).
How can I fix CVE-2018-4838?
There is no known fix for CVE-2018-4838 at the moment. It is recommended to follow the mitigation steps provided by the vendor.
Where can I find more information about CVE-2018-4838?
You can find more information about CVE-2018-4838 in the following references: [Siemens ProductCERT](https://cert-portal.siemens.com/productcert/pdf/ssa-845879.pdf), [US-CERT Advisory](https://ics-cert.us-cert.gov/advisories/ICSA-18-067-01), [SecurityFocus](https://www.securityfocus.com/bid/103379).