Riskcovery

CVE-2018-4838

State
Published
Severity
Not scored
Published
Mar 8, 2018
Updated
Aug 5, 2024
Reserved
Jan 2, 2018

Read the record on cve.org

Description

A vulnerability has been identified in EN100 Ethernet module IEC 61850 variant (All versions < V4.30), EN100 Ethernet module DNP3 variant (All versions < V1.04), EN100 Ethernet module PROFINET IO variant (All versions), EN100 Ethernet module Modbus TCP variant (All versions), EN100 Ethernet module IEC 104 variant (All versions < V1.22). The web interface (TCP/80) of affected devices allows an unauthenticated user to upgrade or downgrade the firmware of the device, including to older versions with known vulnerabilities.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
EN100 Ethernet module IEC 61850 variantSiemens AG
  • All versions < V4.30Affected
EN100 Ethernet module DNP3 variantSiemens AG
  • All versions < V1.04Affected
EN100 Ethernet module PROFINET IO variantSiemens AG
  • All versionsAffected
EN100 Ethernet module Modbus TCP variantSiemens AG
  • All versionsAffected
EN100 Ethernet module IEC 104 variantSiemens AG
  • All versions < V1.22Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.