CVE-2020-25245

A vulnerability has been identified in DIGSI 4 All versions V4.94 SP1 HF 1. Several folders in the %PATH% are writeable by normal users. As these folders are included in the search for dlls, an attacker could place dlls there with code executed by SYSTEM...

DIGSI 4 权限许可和访问控制问题漏洞

SIEMENS DIGSI 4 is a driver from SIEMENS USA. Provides device driver functionality. A privilege license and access control issue vulnerability exists in SIEMENS DIGSI 4. The vulnerability stems from the fact that several folders in \%PATH\% can be written to by a normal user, and can be exploited...

PT-2018-16575 · Siemens +1 · Sicam Pas/Pqs +6

Name of the Vulnerable Software and Affected Versions: IEC 61850 system configurator versions prior to V5.80 DIGSI 5 versions prior to V7.80 DIGSI 4 versions prior to V4.93 SICAM PAS/PQS versions prior to V8.11 SICAM PQ Analyzer versions prior to V3.11 SICAM SCC versions prior to V9.02 HF3...

The vulnerabilities of Siemens EN100 switching module software, SIPROTEC relay protection devices, and the DIGSI 4 device management and configuration software package are related to deficiencies in access control. This allows a intruder to gain full control over the device.

The vulnerabilities of Siemens EN100 switching module software, SIPROTEC relay protection devices, and the DIGSI 4 device management and configuration software package are related to deficiencies in access control. Exploiting these vulnerabilities could allow an attacker, operating remotely, to...

The vulnerabilities of Siemens EN100 switching module software, SIPROTEC relay protection devices, and the DIGSI 4 device management and configuration software package are related to authentication errors, allowing attackers to obtain access passwords.

The vulnerabilities of Siemens EN100 switching module software, SIPROTEC relay protection devices, and the DIGSI 4 device management and configuration software package are related to deficiencies in the authentication process. Exploiting these vulnerabilities can allow attackers to obtain access...

CVE-2018-4840

A vulnerability has been identified in DIGSI 4 All versions V4.92, EN100 Ethernet module DNP3 variant All versions V1.05.00, EN100 Ethernet module IEC 104 variant All versions, EN100 Ethernet module IEC 61850 variant All versions V4.30, EN100 Ethernet module Modbus TCP variant All versions, EN100...