Description
A vulnerability has been identified in DIGSI 4 (All versions < V4.92), EN100 Ethernet module DNP3 variant (All versions < V1.05.00), EN100 Ethernet module IEC 104 variant (All versions), EN100 Ethernet module IEC 61850 variant (All versions < V4.30), EN100 Ethernet module Modbus TCP variant (All versions), EN100 Ethernet module PROFINET IO variant (All versions). The device engineering mechanism allows an unauthenticated remote user to upload a modified device configuration overwriting access authorization passwords.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | DIGSI 4 | All versions < V4.92 | — |
| Siemens | EN100 Ethernet module DNP3 variant | All versions < V1.05.00 | — |
| Siemens | EN100 Ethernet module IEC 104 variant | All versions | — |
| Siemens | EN100 Ethernet module IEC 61850 variant | All versions < V4.30 | — |
| Siemens | EN100 Ethernet module Modbus TCP variant | All versions | — |
| Siemens | EN100 Ethernet module PROFINET IO variant | All versions | — |
Advisories 2
- ICSA-18-067-01 Siemens SIPROTEC 4, SIPROTEC Compact, DIGSI 4, and EN100 Ethernet Module (Update D) CISA ICS & IT advisories · May 6, 2025
- SSA-203306 SSA-203306: Password Vulnerabilities in SIPROTEC 4 and SIPROTEC Compact Relay Families Siemens ProductCERT · Jul 13, 2021