CVE:CVE-2018-4838
CNNVD:CNNVD-201803-230
Siemens EN100 Ethernet module IEC 61850 variant等都是德国西门子（Siemens）公司的以太网模块产品。
多款Siemens产品中的Web界面(TCP/80)存在安全漏洞。攻击者可利用该漏洞升级或降级设备固件。以下产品和版本受到影响：Siemens EN100 Ethernet module IEC 61850 variant 4.30之前版本；EN100 Ethernet module PROFINET IO variant；EN100 Ethernet module Modbus TCP variant；EN100 Ethernet module DNP3 variant；EN100 Ethernet module IEC 104 variant。
solution:Upgrade siemens en100_ethernet_module_iec_104_firmware to a higher version than -; Upgrade siemens en100_ethernet_module_dnp3_firmware to a higher version than -; Upgrade siemens en100_ethernet_module_modbus_tcp_firmware to a higher version than -; Upgrade siemens en100_ethernet_module_profinet_io_firmware to a higher version than -; Upgrade siemens en100_ethernet_module_iec_61850_firmware to a higher version than 4.30,and avoid the version (,4.30)