CVE-2018-4858

🗓️ 09 Jul 2018 19:00:00Reported by siemensType

CVE-2018-4858: Vulnerability in IEC 61850 system configurator & DIGSI

Reporter	Title	Published	Views	Family All 10
CNVD	Multiple Siemens Product Access Bypass Vulnerabilities	16 Nov 201800:00	–	cnvd
Cvelist	CVE-2018-4858	9 Jul 201819:00	–	cvelist
EUVD	EUVD-2018-16644	7 Oct 202500:30	–	euvd
ICS	ICSA-18-317-01 Siemens IEC 61850 System Configurator, DIGSI 5, DIGSI 4, SICAM PAS/PQS, SICAM PQ Analyzer, and SICAM SCC	26 Jun 201800:00	–	ics
NVD	CVE-2018-4858	9 Jul 201819:29	–	nvd
Tenable Nessus	Siemens Ec Unspecified Vulnerability	8 Nov 201900:00	–	nessus
Tenable Nessus	Siemens IEC 61850 System Configurator, DIGSI 5, DIGSI 4, SICAM PAS/PQS, SICAM PQ Analyzer, and SICAM SCC Improper Access Control (CVE-2018-4858)	7 Feb 202200:00	–	nessus
Prion	Design/Logic Flaw	9 Jul 201819:29	–	prion
Positive Technologies	PT-2018-16575 · Siemens +1 · Sicam Pas/Pqs +6	9 Jul 201800:00	–	ptsecurity
ThreatPost	Siemens Patches Firewall Flaw That Put Operations at Risk	14 Nov 201817:40	–	threatpost

NVD

Node

siemens ec_61850_system_configurator_firmwareRange<5.80

AND

siemens ec_61850_system_configuratorMatch-

Node

siemens sicam_pq_analyzer_firmwareRange<3.11

AND

siemens sicam_pq_analyzerMatch-

Node

siemens sicam_scc_firmwareMatch-

AND

siemens sicam_sccMatch-

Node

siemens digsi_4_firmwareMatch-

AND

siemens digsi_4Match-

Node

siemens digsi_5_firmwareRange<7.80

AND

siemens digsi_5Match-

Node

siemens sicam_pas/pqsRange<8.11

[
  {
    "product": "IEC 61850 system configurator, DIGSI 5 (affected as IEC 61850 system configurator is incorporated), DIGSI 4, SICAM PAS/PQS, SICAM PQ Analyzer, SICAM SCC",
    "vendor": "Siemens AG",
    "versions": [
      {
        "status": "affected",
        "version": "IEC 61850 system configurator : All versions < V5.80"
      },
      {
        "status": "affected",
        "version": "DIGSI 5 (affected as IEC 61850 system configurator is incorporated) : All versions < V7.80"
      },
      {
        "status": "affected",
        "version": "DIGSI 4 : All versions < V4.93"
      },
      {
        "status": "affected",
        "version": "SICAM PAS/PQS : All versions < V8.11"
      },
      {
        "status": "affected",
        "version": "SICAM PQ Analyzer : All versions < V3.11"
      },
      {
        "status": "affected",
        "version": "SICAM SCC : All versions < V9.02 HF3"
      }
    ]
  }
]

Source	Link
ics-cert	www.ics-cert.us-cert.gov/advisories/ICSA-18-317-01
securityfocus	www.securityfocus.com/bid/105933
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-159860.pdf

21 Nov 2024 04:07Current

7.5High risk

Vulners AI Score7.5

CVSS 3.17.8

CVSS 29.3

EPSS0.0043

CWE-284