CVE-2018-4840
Estado: ModificadaAlta (7.5)—
A vulnerability has been identified in DIGSI 4 (All versions < V4.92), EN100 Ethernet module DNP3 variant (All versions < V1.05.00), EN100 Ethernet module IEC 104 variant (All versions), EN100 Ethernet module IEC 61850 variant (All versions < V4.30), EN100 Ethernet module Modbus TCP variant (All versions), EN100 Ethernet module PROFINET IO variant (All versions). The device engineering mechanism allows an unauthenticated remote user to upload a modified device configuration overwriting access authorization passwords.
CVSS
- Versión: 3.0
- Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
- Puntuación base: 7.5
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 1.78%
- Percentil entre todas las CVEs puntuadas: 77
- Fecha de la puntuación: 5/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (9)
Siemens — Digsi 4Siemens — En100 Ethernet Module Dnp3 FirmwareSiemens — En100 Ethernet Module IEC 104 FirmwareSiemens — En100 Ethernet Module IEC 61850 FirmwareSiemens — En100 Ethernet Module Modbus TCP FirmwareSiemens — En100 Ethernet Module Profinet IO FirmwareSiemens — Siprotec 4 7sj66 FirmwareSiemens — Siprotec Compact 7sj80 FirmwareSiemens — Siprotec Compact 7sk80 Firmware
CWE
- CWE-306
- CWE-306
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2018-4840",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "LOW",
"availabilityImpact": "NONE",
"confidentialityImpact": "NONE"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV30": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.0",
"baseScore": 7.5,
"attackVector": "NETWORK",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "NONE",
"privilegesRequired": "NONE",
"confidentialityImpact": "NONE"
},
"impactScore": 3.6,
"exploitabilityScore": 3.9
}
]
},
"affected": [
{
"source": "productcert@siemens.com",
"affectedData": [
{
"vendor": "Siemens",
"product": "DIGSI 4",
"versions": [
{
"status": "affected",
"version": "All versions < V4.92"
}
]
},
{
"vendor": "Siemens",
"product": "EN100 Ethernet module DNP3 variant",
"versions": [
{
"status": "affected",
"version": "All versions < V1.05.00"
}
]
},
{
"vendor": "Siemens",
"product": "EN100 Ethernet module IEC 104 variant",
"versions": [
{
"status": "affected",
"version": "All versions"
}
]
},
{
"vendor": "Siemens",
"product": "EN100 Ethernet module IEC 61850 variant",
"versions": [
{
"status": "affected",
"version": "All versions < V4.30"
}
]
},
{
"vendor": "Siemens",
"product": "EN100 Ethernet module Modbus TCP variant",
"versions": [
{
"status": "affected",
"version": "All versions"
}
]
},
{
"vendor": "Siemens",
"product": "EN100 Ethernet module PROFINET IO variant",
"versions": [
{
"status": "affected",
"version": "All versions"
}
]
}
]
}
],
"published": "2018-03-08T17:29:00.307",
"references": [
{
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-203306.pdf",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "productcert@siemens.com"
},
{
"url": "https://ics-cert.us-cert.gov/advisories/ICSA-18-067-01",
"tags": [
"Third Party Advisory",
"US Government Resource"
],
"source": "nvd@nist.gov"
},
{
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-203306.pdf",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Secondary",
"source": "productcert@siemens.com",
"description": [
{
"lang": "en",
"value": "CWE-306"
}
]
},
{
"type": "Secondary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-306"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability has been identified in DIGSI 4 (All versions < V4.92), EN100 Ethernet module DNP3 variant (All versions < V1.05.00), EN100 Ethernet module IEC 104 variant (All versions), EN100 Ethernet module IEC 61850 variant (All versions < V4.30), EN100 Ethernet module Modbus TCP variant (All versions), EN100 Ethernet module PROFINET IO variant (All versions). The device engineering mechanism allows an unauthenticated remote user to upload a modified device configuration overwriting access authorization passwords."
},
{
"lang": "es",
"value": "Se ha identificado una vulnerabilidad en Siemens DIGSI 4 (Todas las versiones anteriores a V4.92), EN100 Ethernet module DNP3 variant (Todas las versiones anteriores a V1.05.00), EN100 Ethernet module IEC 104 variant (Todas las versiones), EN100 Ethernet module IEC 61850 variant (Todas las versiones anteriores a V4.30), EN100 Ethernet module Modbus TCP variant (Todas las versiones), EN100 Ethernet module PROFINET IO variant (Todas las versiones). El mecanismo de ingeniería del dispositivo permite que un usuario remoto no autenticado suba una configuración de dispositivo modificada que sobrescriba las contraseñas de autorización de acceso"
}
],
"lastModified": "2026-06-17T01:59:08.843",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:siprotec_compact_7sj80_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CA01070B-B71D-4432-A39F-91F9AF699985",
"versionEndExcluding": "4.77"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:siprotec_compact_7sj80:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "474DE009-D90F-47D1-912B-765EF1C84AF5"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:siprotec_compact_7sk80_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B9053816-0F6F-4647-AAD4-E665711823EB",
"versionEndExcluding": "4.77"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:siprotec_compact_7sk80:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "EE4B76D9-5208-4766-8E3F-D8911BDC3A78"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:siprotec_4_7sj66_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D44664B0-13FF-449F-A329-2F267C0A29C0",
"versionEndExcluding": "4.30"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:siprotec_4_7sj66:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "53D3E04F-7181-488A-AAEF-E846C3DC9BCB"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:digsi_4:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "69174713-D30C-41BE-8192-E3A766E68E9F",
"versionEndExcluding": "4.92"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:en100_ethernet_module_iec_104_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "300FAA93-3BBB-4848-AFA5-97DE57053E5E"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:en100_ethernet_module_iec_104:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "75FDB347-4ED5-4A36-A9CA-B2A461A92572"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:en100_ethernet_module_dnp3_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "15E8060A-2897-4E2E-9441-5687D923C642"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:en100_ethernet_module_dnp3:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "6E733162-1D6E-4CF7-9CB2-007C8CA8B6B4"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:en100_ethernet_module_modbus_tcp_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "71DCD4E3-9BA4-44CE-BFCC-6659258FCE31"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:en100_ethernet_module_modbus_tcp:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "48118739-31B9-4600-8856-D7E9870479E7"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:en100_ethernet_module_profinet_io_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0C2FA062-EBFE-457F-988E-60A9317212A4"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:en100_ethernet_module_profinet_io:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "11199473-60BF-42AB-B6F0-BEF9663C67B7"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:en100_ethernet_module_iec_61850_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "42ABCFB1-0D86-47DB-8257-370B70E1C969",
"versionEndExcluding": "4.30"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:en100_ethernet_module_iec_61850:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "3C5EC8F7-6CD2-461B-9D06-2D9F4D083A98"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "productcert@siemens.com"
}