High severity7.5NVD Advisory· Published Mar 8, 2018· Updated Jun 17, 2026
CVE-2018-4838
CVE-2018-4838
Description
A vulnerability has been identified in EN100 Ethernet module IEC 61850 variant (All versions < V4.30), EN100 Ethernet module DNP3 variant (All versions < V1.04), EN100 Ethernet module PROFINET IO variant (All versions), EN100 Ethernet module Modbus TCP variant (All versions), EN100 Ethernet module IEC 104 variant (All versions < V1.22). The web interface (TCP/80) of affected devices allows an unauthenticated user to upgrade or downgrade the firmware of the device, including to older versions with known vulnerabilities.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
11- Siemens AG/EN100 Ethernet module IEC 61850 variantv5Range: All versions < V4.30
- Siemens AG/EN100 Ethernet module DNP3 variantv5Range: All versions < V1.04
- Siemens AG/EN100 Ethernet module PROFINET IO variantv5Range: All versions
- Siemens AG/EN100 Ethernet module Modbus TCP variantv5Range: All versions
- Siemens AG/EN100 Ethernet module IEC 104 variantv5Range: All versions < V1.22
- cpe:2.3:o:siemens:en100_ethernet_module_iec_104_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:siemens:en100_ethernet_module_dnp3_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:siemens:en100_ethernet_module_modbus_tcp_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:siemens:en100_ethernet_module_profinet_io_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:siemens:en100_ethernet_module_iec_61850_firmware:*:*:*:*:*:*:*:*Range: <4.30
Patches
Vulnerability mechanics
References
3- cert-portal.siemens.com/productcert/pdf/ssa-845879.pdfnvdPatchVendor Advisory
- ics-cert.us-cert.gov/advisories/ICSA-18-067-01nvdThird Party AdvisoryUS Government Resource
- www.securityfocus.com/bid/103379nvd
News mentions
0No linked articles in our index yet.