CVE-2018-13805
published 2018-10-10CVE-2018-13805: A vulnerability has been identified in SIMATIC ET 200SP Open Controller (All versions >= V2.0 and = V2.0 and = V2.0 and < V2.5). An attacker can cause a…
PriorityP340high7.5CVSS 3.0
AVNACLPRNUINSUCNINAH
EPSS
1.53%
72.0th percentile
A vulnerability has been identified in SIMATIC ET 200SP Open Controller (All versions >= V2.0 and = V2.0 and = V2.0 and < V2.5). An attacker can cause a denial-of-service condition on the network stack by sending a large number of specially crafted packets to the PLC. The PLC will lose its ability to communicate over the network. This vulnerability could be exploited by an attacker with network access to the affected systems. Successful exploitation requires no privileges and no user interaction. An attacker could use this vulnerability to compromise availability of the network connectivity. At the time of advisory publication no public exploitation of this vulnerability was known.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| siemens | simatic_et_200sp_firmware | >= 2.0 | — |
| siemens | simatic_s7-1500_firmware | >= 2.0 < 2.5 | 2.5 |
| siemens | simatic_s7-1500f_firmware | >= 2.0 < 2.5 | 2.5 |
| siemens_ag | simatic_et_200sp_open_controller | — | — |
| siemens_ag | simatic_s7-1500_incl_f | — | — |
| siemens_ag | simatic_s7-1500_software_controller | — | — |
CVSS provenance
nvdv3.07.5HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-mxvx-9h7h-6vxh: A vulnerability has been identified in SIMATIC ET 200SP Open Controller (All versions >= V2
ghsa_unreviewed·2022-05-14
CVE-2018-13805 [HIGH] CWE-400 GHSA-mxvx-9h7h-6vxh: A vulnerability has been identified in SIMATIC ET 200SP Open Controller (All versions >= V2
A vulnerability has been identified in SIMATIC ET 200SP Open Controller (All versions >= V2.0 and = V2.0 and = V2.0 and < V2.5). An attacker can cause a denial-of-service condition on the network stack by sending a large number of specially crafted packets to the PLC. The PLC will lose its ability to communicate over the network. This vulnerability could be exploited by an attacker with network access to the affected systems. Successful exploitation requires no privileges and no user interaction. An attacker could use this vulnerability to compromise availability of the network connectivity. At the time of advisory publication no public exploitation of this vulnerability was known.
CISA ICS
Siemens SIMATIC S7-1500, SIMATIC S7-1500 Software Controller and SIMATIC ET 200SP OpenController (Update A)
cisa_ics·2018-10-09
Siemens SIMATIC S7-1500, SIMATIC S7-1500 Software Controller and SIMATIC ET 200SP OpenController (Update A)
## Archived Content In an effort to keep CISA.gov current, the archive contains outdated information that may not reflect current policy or programs.
ICS Advisory
##
Siemens SIMATIC S7-1500, SIMATIC S7-1500 Software Controller and SIMATIC ET 200SP OpenController (Update A)
Last RevisedFebruary 12, 2019
Alert CodeICSA-18-282-05
## 1. EXECUTIVE SUMMARY
-
CVSS v3 5.3
- ATTENTION: Exploitable remotely/low skill level to exploit
- Vendor: Siemens
- Equipment: SIMATIC S7-1500, SIMATIC S7-1500 Software Controller and SIMATIC ET 200SP Open Controller
- Vulnerability: Improper Input Validation
## 2. UPDATE INFORMATION
This updated advisory is a follow-up to the original advisory titled ICSA-18-282-05 Siemens SIMATIC S7-1500, SIMATIC S7-1500 Sof
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2018-10-10
Published