Digsi 4

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2018-4840 Mar 08, 17:29 HIGH PATCH This Week

A vulnerability has been identified in DIGSI 4 (All versions < V4.92), EN100 Ethernet module DNP3 variant (All versions < V1.05.00), EN100 Ethernet module IEC 104 variant (All versions), EN100. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Missing Authentication for Critical Function vulnerability could allow attackers to access critical functionality without authentication.

Authentication Bypass Siemens En100 Ethernet Module Iec 104 Firmware En100 Ethernet Module Dnp3 Firmware En100 Ethernet Module Modbus Tcp Firmware +6

NVD

CVSS 3.0

7.5

EPSS

1.8%

CVE-2018-4839 Mar 08, 17:29 MEDIUM PATCH This Month

Information Disclosure Siemens En100 Ethernet Module Iec 104 Firmware En100 Ethernet Module Dnp3 Firmware En100 Ethernet Module Modbus Tcp Firmware +6

NVD

CVSS 3.0

5.3

EPSS

0.6%

CVE-2018-4840

EPSS 2% CVSS 7.5

HIGH PATCH This Week

Authentication Bypass Siemens En100 Ethernet Module Iec 104 Firmware +8

NVD

CVE-2018-4839

EPSS 1% CVSS 5.3

MEDIUM PATCH This Month

Information Disclosure Siemens En100 Ethernet Module Iec 104 Firmware +8

NVD