Authorization

2018-03-0817:29:00

PRIOn knowledge base

www.prio-n.com

7.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

49.8%

JSON

A vulnerability has been identified in DIGSI 4 (All versions < V4.92), EN100 Ethernet module DNP3 variant (All versions < V1.05.00), EN100 Ethernet module IEC 104 variant (All versions), EN100 Ethernet module IEC 61850 variant (All versions < V4.30), EN100 Ethernet module Modbus TCP variant (All versions), EN100 Ethernet module PROFINET IO variant (All versions). The device engineering mechanism allows an unauthenticated remote user to upload a modified device configuration overwriting access authorization passwords.

CPENameOperatorVersion
digsi_4lt4.92
en100_ethernet_module_iec_61850_firmwarelt4.30
siprotec_4_7sj66_firmwarelt4.30
siprotec_compact_7sj80_firmwarelt4.77
siprotec_compact_7sk80_firmwarelt4.77

Name	Operator	Version
digsi_4	lt	4.92
en100_ethernet_module_iec_61850_firmware	lt	4.30
siprotec_4_7sj66_firmware	lt	4.30
siprotec_compact_7sj80_firmware	lt	4.77
siprotec_compact_7sk80_firmware	lt	4.77