8.8

CVE-2018-4833

A vulnerability has been identified in RFID 181EIP (All versions), RUGGEDCOM Win (V4.4, V4.5, V5.0, and V5.1), SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.3), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.4.1), SCALANCE X-200RNA switch family (All versions < V3.2.6), SCALANCE X-300 switch family (incl. SIPLUS NET variants) (All versions < V4.1.3), SCALANCE X408 (All versions < V4.1.3), SCALANCE X414 (All versions), SIMATIC RF182C (All versions). Unprivileged remote attackers located in the same local network segment (OSI Layer 2) could gain remote code execution on the affected products by sending a specially crafted DHCP response to a client's DHCP request.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Siemens ≫ Rfid 181-eip Firmware Version -
   Siemens ≫ Rfid 181-eip Version -
Siemens ≫ Ruggedcom Wimax Firmware Version 4.4
   Siemens ≫ Ruggedcom Wimax Version -
Siemens ≫ Ruggedcom Wimax Firmware Version 4.5
   Siemens ≫ Ruggedcom Wimax Version -
Siemens ≫ Scalance X200 Firmware Version < 5.2.3
   Siemens ≫ Scalance X200 Version -
Siemens ≫ Scalance X200irt Firmware Version < 5.4.1
   Siemens ≫ Scalance X200irt Version -
Siemens ≫ Scalance X204rna Firmware Version -
   Siemens ≫ Scalance X204rna Version -
Siemens ≫ Scalance X300 Firmware Version -
   Siemens ≫ Scalance X300 Version -
Siemens ≫ Scalance X408 Firmware Version -
   Siemens ≫ Scalance X408 Version -
Siemens ≫ Scalance X414 Firmware Version -
   Siemens ≫ Scalance X414 Version -
Siemens ≫ Simatic Rf182c Firmware Version -
   Siemens ≫ Simatic Rf182c Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.95% 0.567
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 8.8 2.8 5.9
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NIST 5.8 6.5 6.4
AV:A/AC:L/Au:N/C:P/I:P/A:P
CWE-122 Heap-based Buffer Overflow

A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

https://cert-portal.siemens.com/productcert/pdf/ssa-181018.pdf
Vendor Advisory