A vulnerability has been identified in DIGSI 4 (All versions < V4.92), EN100 Ethernet module DNP3 variant (All versions < V1.05.00), EN100…

Description

A vulnerability has been identified in DIGSI 4 (All versions < V4.92), EN100 Ethernet module DNP3 variant (All versions < V1.05.00), EN100 Ethernet module IEC 104 variant (All versions), EN100 Ethernet module IEC 61850 variant (All versions < V4.30), EN100 Ethernet module Modbus TCP variant (All versions), EN100 Ethernet module PROFINET IO variant (All versions), Other SIPROTEC 4 relays (All versions), Other SIPROTEC Compact relays (All versions), SIPROTEC 4 7SD80 (All versions < V4.70), SIPROTEC 4 7SJ61 (All versions < V4.96), SIPROTEC 4 7SJ62 (All versions < V4.96), SIPROTEC 4 7SJ64 (All versions < V4.96), SIPROTEC 4 7SJ66 (All versions < V4.30), SIPROTEC Compact 7SJ80 (All versions < V4.77), SIPROTEC Compact 7SK80 (All versions < V4.77). An attacker with local access to the engineering system or in a privileged network position and able to obtain certain network traffic could possibly reconstruct access authorization passwords.

Scores

EPSS (exploitation in 30 days)

0.58% · top 52% of all CVEs (4 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.3.

Weakness

• CWE-326: Inadequate Encryption Strength (opens in a new tab)All about CWE-326 and its CVEs

Affected products

• Siemens · DIGSI 4

  • affected All versions < V4.92

• Siemens · EN100 Ethernet module DNP3 variant

  • affected All versions < V1.05.00

• Siemens · EN100 Ethernet module IEC 104 variant

  • affected All versions

• Siemens · EN100 Ethernet module IEC 61850 variant

  • affected All versions < V4.30

• Siemens · EN100 Ethernet module Modbus TCP variant

  • affected All versions

• Siemens · EN100 Ethernet module PROFINET IO variant

  • affected All versions

• Siemens · Other SIPROTEC 4 relays

  • affected All versions

• Siemens · Other SIPROTEC Compact relays

  • affected All versions

• Siemens · SIPROTEC 4 7SD80

  • affected All versions < V4.70

• Siemens · SIPROTEC 4 7SJ61

  • affected All versions < V4.96

• Siemens · SIPROTEC 4 7SJ62

  • affected All versions < V4.96

• Siemens · SIPROTEC 4 7SJ64

  • affected All versions < V4.96

• Siemens · SIPROTEC 4 7SJ66

  • affected All versions < V4.30

• Siemens · SIPROTEC Compact 7SJ80

  • affected All versions < V4.77

• Siemens · SIPROTEC Compact 7SK80

  • affected All versions < V4.77

References (1)

• https://cert-portal.siemens.com/productcert/pdf/ssa-203306.pdf (opens in a new tab)x_refsource_CONFIRMx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2018-4839](https://trackcve.app/badge/CVE-2018-4839.svg)](https://trackcve.app/cve/CVE-2018-4839)

Record last updated 5 Aug 2024, 05:18 UTC.