CVE-2018-4839
Estado: ModificadaMedia (5.3)—
A vulnerability has been identified in DIGSI 4 (All versions < V4.92), EN100 Ethernet module DNP3 variant (All versions < V1.05.00), EN100 Ethernet module IEC 104 variant (All versions), EN100 Ethernet module IEC 61850 variant (All versions < V4.30), EN100 Ethernet module Modbus TCP variant (All versions), EN100 Ethernet module PROFINET IO variant (All versions), Other SIPROTEC 4 relays (All versions), Other SIPROTEC Compact relays (All versions), SIPROTEC 4 7SD80 (All versions < V4.70), SIPROTEC 4 7SJ61 (All versions < V4.96), SIPROTEC 4 7SJ62 (All versions < V4.96), SIPROTEC 4 7SJ64 (All versions < V4.96), SIPROTEC 4 7SJ66 (All versions < V4.30), SIPROTEC Compact 7SJ80 (All versions < V4.77), SIPROTEC Compact 7SK80 (All versions < V4.77).
Leer descripción completaMostrar menos
An attacker with local access to the engineering system or in a privileged network position and able to obtain certain network traffic could possibly reconstruct access authorization passwords.
CVSS
- Versión: 3.0
- Vector: CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
- Puntuación base: 5.3
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.58%
- Percentil entre todas las CVEs puntuadas: 46
- Fecha de la puntuación: 5/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (9)
Siemens — Digsi 4Siemens — En100 Ethernet Module Dnp3 FirmwareSiemens — En100 Ethernet Module IEC 104 FirmwareSiemens — En100 Ethernet Module IEC 61850 FirmwareSiemens — En100 Ethernet Module Modbus TCP FirmwareSiemens — En100 Ethernet Module Profinet IO FirmwareSiemens — Siprotec 4 7sj66 FirmwareSiemens — Siprotec Compact 7sj80 FirmwareSiemens — Siprotec Compact 7sk80 Firmware
CWE
- CWE-326
- NVD-CWE-noinfo
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2018-4839",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 3.5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:M/Au:S/C:P/I:N/A:N",
"authentication": "SINGLE",
"integrityImpact": "NONE",
"accessComplexity": "MEDIUM",
"availabilityImpact": "NONE",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "LOW",
"obtainAllPrivilege": false,
"exploitabilityScore": 6.8,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV30": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.0",
"baseScore": 5.3,
"attackVector": "NETWORK",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "HIGH",
"availabilityImpact": "NONE",
"privilegesRequired": "LOW",
"confidentialityImpact": "HIGH"
},
"impactScore": 3.6,
"exploitabilityScore": 1.6
}
]
},
"affected": [
{
"source": "productcert@siemens.com",
"affectedData": [
{
"vendor": "Siemens",
"product": "DIGSI 4",
"versions": [
{
"status": "affected",
"version": "All versions < V4.92"
}
]
},
{
"vendor": "Siemens",
"product": "EN100 Ethernet module DNP3 variant",
"versions": [
{
"status": "affected",
"version": "All versions < V1.05.00"
}
]
},
{
"vendor": "Siemens",
"product": "EN100 Ethernet module IEC 104 variant",
"versions": [
{
"status": "affected",
"version": "All versions"
}
]
},
{
"vendor": "Siemens",
"product": "EN100 Ethernet module IEC 61850 variant",
"versions": [
{
"status": "affected",
"version": "All versions < V4.30"
}
]
},
{
"vendor": "Siemens",
"product": "EN100 Ethernet module Modbus TCP variant",
"versions": [
{
"status": "affected",
"version": "All versions"
}
]
},
{
"vendor": "Siemens",
"product": "EN100 Ethernet module PROFINET IO variant",
"versions": [
{
"status": "affected",
"version": "All versions"
}
]
},
{
"vendor": "Siemens",
"product": "Other SIPROTEC 4 relays",
"versions": [
{
"status": "affected",
"version": "All versions"
}
]
},
{
"vendor": "Siemens",
"product": "Other SIPROTEC Compact relays",
"versions": [
{
"status": "affected",
"version": "All versions"
}
]
},
{
"vendor": "Siemens",
"product": "SIPROTEC 4 7SD80",
"versions": [
{
"status": "affected",
"version": "All versions < V4.70"
}
]
},
{
"vendor": "Siemens",
"product": "SIPROTEC 4 7SJ61",
"versions": [
{
"status": "affected",
"version": "All versions < V4.96"
}
]
},
{
"vendor": "Siemens",
"product": "SIPROTEC 4 7SJ62",
"versions": [
{
"status": "affected",
"version": "All versions < V4.96"
}
]
},
{
"vendor": "Siemens",
"product": "SIPROTEC 4 7SJ64",
"versions": [
{
"status": "affected",
"version": "All versions < V4.96"
}
]
},
{
"vendor": "Siemens",
"product": "SIPROTEC 4 7SJ66",
"versions": [
{
"status": "affected",
"version": "All versions < V4.30"
}
]
},
{
"vendor": "Siemens",
"product": "SIPROTEC Compact 7SJ80",
"versions": [
{
"status": "affected",
"version": "All versions < V4.77"
}
]
},
{
"vendor": "Siemens",
"product": "SIPROTEC Compact 7SK80",
"versions": [
{
"status": "affected",
"version": "All versions < V4.77"
}
]
}
]
}
],
"published": "2018-03-08T17:29:00.257",
"references": [
{
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-203306.pdf",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "productcert@siemens.com"
},
{
"url": "https://ics-cert.us-cert.gov/advisories/ICSA-18-067-01",
"tags": [
"Third Party Advisory",
"US Government Resource"
],
"source": "nvd@nist.gov"
},
{
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-203306.pdf",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Secondary",
"source": "productcert@siemens.com",
"description": [
{
"lang": "en",
"value": "CWE-326"
}
]
},
{
"type": "Secondary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability has been identified in DIGSI 4 (All versions < V4.92), EN100 Ethernet module DNP3 variant (All versions < V1.05.00), EN100 Ethernet module IEC 104 variant (All versions), EN100 Ethernet module IEC 61850 variant (All versions < V4.30), EN100 Ethernet module Modbus TCP variant (All versions), EN100 Ethernet module PROFINET IO variant (All versions), Other SIPROTEC 4 relays (All versions), Other SIPROTEC Compact relays (All versions), SIPROTEC 4 7SD80 (All versions < V4.70), SIPROTEC 4 7SJ61 (All versions < V4.96), SIPROTEC 4 7SJ62 (All versions < V4.96), SIPROTEC 4 7SJ64 (All versions < V4.96), SIPROTEC 4 7SJ66 (All versions < V4.30), SIPROTEC Compact 7SJ80 (All versions < V4.77), SIPROTEC Compact 7SK80 (All versions < V4.77). An attacker with local access to the engineering system or in a privileged network position and able to obtain certain network traffic could possibly reconstruct access authorization passwords."
},
{
"lang": "es",
"value": "Se ha identificado una vulnerabilidad en Siemens DIGSI 4 (Todas las versiones anteriores a V4.92), EN100 Ethernet module DNP3 variant (Todas las versiones anteriores a V1.05.00), EN100 Ethernet module IEC 104 variant (Todas las versiones), EN100 Ethernet module IEC 61850 variant (Todas las versiones anteriores a V4.30), EN100 Ethernet module Modbus TCP variant (Todas las versiones), EN100 Ethernet module PROFINET IO variant (Todas las versiones), Other SIPROTEC 4 relays (Todas las versiones), Other SIPROTEC Compact relays (Todas las versiones), SIPROTEC 4 7SD80 (Todas las versiones anteriores a V4.70), SIPROTEC 4 7SJ61 (Todas las versiones anteriores a V4.96), SIPROTEC 4 7SJ62 (Todas las versiones anteriores a V4.96), SIPROTEC 4 7SJ64 (Todas las versiones anteriores a V4.96), SIPROTEC 4 7SJ66 (Todas las versiones anteriores a V4.30), SIPROTEC Compact 7SJ80 (Todas las versiones anteriores a V4.77), SIPROTEC Compact 7SK80 (Todas las versiones anteriores a V4.77). Un atacante con acceso local al sistema de ingeniería o en una posición de red privilegiada y capaz de obtener cierto tráfico de red podría reconstruir contraseñas de autorización de acceso"
}
],
"lastModified": "2026-06-17T01:59:08.720",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:siprotec_compact_7sj80_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CA01070B-B71D-4432-A39F-91F9AF699985",
"versionEndExcluding": "4.77"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:siprotec_compact_7sj80:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "474DE009-D90F-47D1-912B-765EF1C84AF5"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:siprotec_compact_7sk80_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B9053816-0F6F-4647-AAD4-E665711823EB",
"versionEndExcluding": "4.77"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:siprotec_compact_7sk80:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "EE4B76D9-5208-4766-8E3F-D8911BDC3A78"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:siprotec_4_7sj66_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D44664B0-13FF-449F-A329-2F267C0A29C0",
"versionEndExcluding": "4.30"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:siprotec_4_7sj66:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "53D3E04F-7181-488A-AAEF-E846C3DC9BCB"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:digsi_4:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "69174713-D30C-41BE-8192-E3A766E68E9F",
"versionEndExcluding": "4.92"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:en100_ethernet_module_iec_104_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "300FAA93-3BBB-4848-AFA5-97DE57053E5E"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:en100_ethernet_module_iec_104:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "75FDB347-4ED5-4A36-A9CA-B2A461A92572"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:en100_ethernet_module_dnp3_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "15E8060A-2897-4E2E-9441-5687D923C642"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:en100_ethernet_module_dnp3:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "6E733162-1D6E-4CF7-9CB2-007C8CA8B6B4"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:en100_ethernet_module_modbus_tcp_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "71DCD4E3-9BA4-44CE-BFCC-6659258FCE31"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:en100_ethernet_module_modbus_tcp:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "48118739-31B9-4600-8856-D7E9870479E7"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:en100_ethernet_module_profinet_io_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0C2FA062-EBFE-457F-988E-60A9317212A4"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:en100_ethernet_module_profinet_io:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "11199473-60BF-42AB-B6F0-BEF9663C67B7"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:en100_ethernet_module_iec_61850_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "42ABCFB1-0D86-47DB-8257-370B70E1C969",
"versionEndExcluding": "4.30"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:en100_ethernet_module_iec_61850:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "3C5EC8F7-6CD2-461B-9D06-2D9F4D083A98"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "productcert@siemens.com"
}