Skip to content
fr Sign in
Not rated

CVE-2018-4840 A vulnerability has been identified in DIGSI 4 (All versions < V4.92), EN100 Ethernet module DNP3 variant (All…

Description

A vulnerability has been identified in DIGSI 4 (All versions < V4.92), EN100 Ethernet module DNP3 variant (All versions < V1.05.00), EN100 Ethernet module IEC 104 variant (All versions), EN100 Ethernet module IEC 61850 variant (All versions < V4.30), EN100 Ethernet module Modbus TCP variant (All versions), EN100 Ethernet module PROFINET IO variant (All versions). The device engineering mechanism allows an unauthenticated remote user to upload a modified device configuration overwriting access authorization passwords.

Affected products and versions

Product Affected versions Fixed in
DIGSI 4 Versions not published
EN100 Ethernet module DNP3 variant Versions not published
EN100 Ethernet module IEC 104 variant Versions not published
EN100 Ethernet module IEC 61850 variant Versions not published
EN100 Ethernet module Modbus TCP variant Versions not published
EN100 Ethernet module PROFINET IO variant Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of DIGSI 4

The 3 CVEs of DIGSI 4 →
CVE-2020-25245 A vulnerability has been identified in DIGSI 4 (All versions < V4.94 SP1 HF 1) Not rated CVE-2018-4839 A vulnerability has been identified in DIGSI 4 (All versions < V4.92), EN100 Ethernet module DNP3 variant (All… Not rated
Track this CVE