High severity7.5NVD Advisory· Published Mar 8, 2018· Updated Jun 17, 2026

CVE-2018-4840

Description

A vulnerability has been identified in DIGSI 4 (All versions < V4.92), EN100 Ethernet module DNP3 variant (All versions < V1.05.00), EN100 Ethernet module IEC 104 variant (All versions), EN100 Ethernet module IEC 61850 variant (All versions < V4.30), EN100 Ethernet module Modbus TCP variant (All versions), EN100 Ethernet module PROFINET IO variant (All versions). The device engineering mechanism allows an unauthenticated remote user to upload a modified device configuration overwriting access authorization passwords.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Siemens Foundation/EN100 Ethernet module IEC 61850 variantllm-create2 versions
<4.30+ 1 more
- (no CPE)range: <4.30
- (no CPE)range: All versions < V4.30
Siemens Foundation/DIGSI 4llm-fuzzy2 versions
<4.92+ 1 more
- (no CPE)range: <4.92
- (no CPE)range: All versions < V4.92
Siemens Foundation/EN100 Ethernet module DNP3 variantllm-fuzzy2 versions
<1.05.00+ 1 more
- (no CPE)range: <1.05.00
- (no CPE)range: All versions < V1.05.00
Siemens Foundation/EN100 Ethernet modulecpe-rescue2 versions
All versions+ 1 more
- (no CPE)range: All versions
- (no CPE)range: All versions
Siemens Foundation/EN100 Ethernet module PROFINET IO variantcpe-rescue
Range: All versions

Patches

Vulnerability mechanics

References

cert-portal.siemens.com/productcert/pdf/ssa-203306.pdfnvdPatchVendor Advisory
ics-cert.us-cert.gov/advisories/ICSA-18-067-01nvdThird Party AdvisoryUS Government Resource

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000