CVE-2018-4839

CVE-2018-4839 affects Siemens SIPROTEC 4, SIPROTEC Compact, DIGSI 4, and EN100 Ethernet modules. The root issues are Missing Authentication for Critical Function (CWE-306) and Inadequate Encryption Strength (CWE-326). A local/privileged attacker who can access network traffic could reconstruct ac...

Siemens SIPROTEC 4, SIPROTEC Compact, DIGSI 4, and EN100 Ethernet Module (Update D)

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION : Exploitable remotely/low attack complexity Vendor : Siemens Equipment : SIPROTEC 4, SIPROTEC Compact, DIGSI 4, and EN100 Ethernet module Vulnerabilities : Missing Authentication for Critical Function, Inadequate Encryption Strength 2. UPDATE...