Lucene search

CVE-2018-4838

🗓️ 08 Mar 2018 17:00:29Reported by [email protected]Type

Vulnerability in EN100 Ethernet modules allowing unauthenticated firmware upgrade

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 8
ICS	ICSA-18-067-02_Siemens SIPROTEC 4, SIPROTEC Compact, and Reyrolle Devices using the EN100 Ethernet Communication Module Extension (Update B)	8 Mar 201800:00	–	ics
Positive Technologies	PT-2018-05: Unauthorized Firmware Modification in Siemens EN100 Ethernet modules	17 Dec 201500:00	–	ptsecurity
Cvelist	CVE-2018-4838	8 Mar 201817:00	–	cvelist
Tenable Nessus	Siemens En100 Missing Authentication for Critical Function	8 Nov 201900:00	–	nessus
Tenable Nessus	Siemens SIPROTEC 4, SIPROTEC Compact, and Reyrolle Devices using the EN100 Ethernet Communication Module Extension Missing Authentication For Critical Function (CVE-2018-4838)	7 Feb 202200:00	–	nessus
Prion	Design/Logic Flaw	8 Mar 201817:29	–	prion
CVE	CVE-2018-4838	8 Mar 201817:29	–	cve
ThreatPost	Siemens Warns of Critical Remote-Code Execution ICS Flaw	12 Feb 201922:59	–	threatpost

Nvd

Node

siemens en100_ethernet_module_iec_104_firmwareMatch-

AND

siemens en100_ethernet_module_iec_104Match-

Node

siemens en100_ethernet_module_dnp3_firmwareMatch-

AND

siemens en100_ethernet_module_dnp3Match-

Node

siemens en100_ethernet_module_modbus_tcp_firmwareMatch-

AND

siemens en100_ethernet_module_modbus_tcpMatch-

Node

siemens en100_ethernet_module_profinet_io_firmwareMatch-

AND

siemens en100_ethernet_module_profinet_ioMatch-

Node

siemens en100_ethernet_module_iec_61850_firmwareRange<4.30

AND

siemens en100_ethernet_module_iec_61850Match-

Source	Link
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-845879.pdf
securityfocus	www.securityfocus.com/bid/103379
ics-cert	www.ics-cert.us-cert.gov/advisories/ICSA-18-067-01

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

08 Mar 2018 17:29Current

7.5High risk

Vulners AI Score7.5

CVSS25

CVSS37.5

EPSS0.00254

CWE-306