Skip to content
OpenAdvisories
High ICSA-18-067-01 2 CVEs

Siemens SIPROTEC 4, SIPROTEC Compact, DIGSI 4, and EN100 Ethernet Module (Update D)

Published Mar 8, 2018 · Updated May 6, 2025 · Revision 7

Vendor: Siemens Product: DIGSI 4 Product: EN100 Ethernet module DNP3 variant Product: EN100 Ethernet module IEC 104 variant Product: EN100 Ethernet module IEC 61850 variant Product: EN100 Ethernet module Modbus TCP variant Product: EN100 Ethernet module PROFINET IO variant Product: Other SIPROTEC 4 relays Product: Other SIPROTEC Compact relays Product: SIPROTEC 4 7SD80 Product: SIPROTEC 4 7SJ61 Product: SIPROTEC 4 7SJ62 Product: SIPROTEC 4 7SJ64 Product: SIPROTEC 4 7SJ66 Product: SIPROTEC Compact 7SJ80 Product: SIPROTEC Compact 7SK80

Summary

SIPROTEC 4 and SIPROTEC Compact devices could allow access authorization passwords to be reconstructed or overwritten via engineering mechanisms that involve DIGSI 4 and EN100 Ethernet communication modules.

Siemens has released updates for several affected products, and recommends specific countermeasures for the remaining products.

Vulnerabilities 2

Revision history

  1. #7

    Revision - Fixing typos

  2. #6

    Corrected update version for DNP3

  3. #5

    Added updates for 7SJ61, 7SJ62 and 7SJ64, and recommendation to contact customer care for products without solution

  4. #4

    Added update for 7SD80

  5. #3

    Added update for DNP3 TCP

  6. #1

    Publication Date

  7. #2

    Corrected product name SIPROTEC 4 7SJ66

References