CVE-2018-4838

A vulnerability has been identified in EN100 Ethernet module IEC 61850 variant (All versions < V4.30), EN100 Ethernet module DNP3 variant (All versions < V1.04), EN100 Ethernet module PROFINET IO variant (All versions), EN100 Ethernet module Modbus TCP variant (All versions), EN100 Ethernet module IEC 104 variant (All versions < V1.22). The web interface (TCP/80) of affected devices allows an unauthenticated user to upgrade or downgrade the firmware of the device, including to older versions with known vulnerabilities.

• CWE-306

• https://cert-portal.siemens.com/productcert/pdf/ssa-845879.pdfPatch, Vendor Advisory
• https://www.securityfocus.com/bid/103379
• https://ics-cert.us-cert.gov/advisories/ICSA-18-067-01Third Party Advisory, US Government Resource
• https://cert-portal.siemens.com/productcert/pdf/ssa-845879.pdfPatch, Vendor Advisory
• https://www.securityfocus.com/bid/103379

Published

Mar 8, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-4832A vulnerability has been identified in OpenPCS 7 V7.1 and ea…7.5
• CVE-2018-4833A vulnerability has been identified in RFID 181EIP (All vers…
• CVE-2018-4834A vulnerability has been identified in Desigo PXC00-E.D V4.1…9.8
• CVE-2018-4835A vulnerability has been identified in TeleControl Server Ba…
• CVE-2018-4836A vulnerability has been identified in TeleControl Server Ba…
• CVE-2018-4837A vulnerability has been identified in TeleControl Server Ba…
• CVE-2018-4839A vulnerability has been identified in DIGSI 4 (All versions…
• CVE-2018-4840A vulnerability has been identified in DIGSI 4 (All versions…
• CVE-2018-4841A vulnerability has been identified in TIM 1531 IRC (All ver…9.8
• CVE-2018-4842A vulnerability has been identified in SCALANCE X-200IRT swi…
• CVE-2018-4843A vulnerability has been identified in SIMATIC S7-400 CPU 4…6.5
• CVE-2018-4844A vulnerability has been identified in SIMATIC WinCC OA UI f…6.7