CVE-2018-4840

CVE-2018-4840 affects Siemens DIGSI 4 and EN100 Ethernet modules (DNP3, IEC 104, IEC 61850, Modbus TCP, PROFINET IO). The issue allows an unauthenticated remote attacker to upload a modified device configuration that overwrites the access-authorization passwords. Affected products include DIGSI 4...

CVE-2020-25245

CVE-2020-25245 affects Siemens DIGSI 4 (all versions before v4.94 SP1 HF 1). The root cause is that several folders in %PATH% are writable by normal users and are included in DLL search paths, enabling a local attacker to place DLLs that execute code with SYSTEM privileges. Impact described acros...

CVE-2018-4839

CVE-2018-4839 affects Siemens SIPROTEC 4, SIPROTEC Compact, DIGSI 4, and EN100 Ethernet modules. The root issues are Missing Authentication for Critical Function (CWE-306) and Inadequate Encryption Strength (CWE-326). A local/privileged attacker who can access network traffic could reconstruct ac...