CVE-2018-4843
published 2018-03-20CVE-2018-4843: A vulnerability has been identified in SIMATIC S7-400 CPU 414-3 PN/DP V7 (All versions < V7.0.3), SIMATIC S7-400 CPU 414F-3 PN/DP V7 (All versions < V7.0.3)…
PriorityP424medium6.5CVSS 3.1
AVAACLPRNUINSUCNINAH
EPSS
0.55%
42.2th percentile
A vulnerability has been identified in SIMATIC S7-400 CPU 414-3 PN/DP V7 (All versions < V7.0.3), SIMATIC S7-400 CPU 414F-3 PN/DP V7 (All versions < V7.0.3), SIMATIC S7-400 CPU 416-3 PN/DP V7 (All versions < V7.0.3), SIMATIC S7-400 CPU 416F-3 PN/DP V7 (All versions < V7.0.3), SIMATIC CP 343-1 (incl. SIPLUS variants) (All versions), SIMATIC CP 343-1 Advanced (incl. SIPLUS variants) (All versions), SIMATIC CP 443-1 (All versions < V3.3), SIMATIC CP 443-1 (All versions < V3.3), SIMATIC CP 443-1 Advanced (All versions < V3.3), SIMATIC ET 200pro IM154-8 PN/DP CPU (All versions < V3.2.16), SIMATIC ET 200pro IM154-8F PN/DP CPU (All versions < V3.2.16), SIMATIC ET 200pro IM154-8FX PN/DP CPU (All versions < V3.2.16), SIMATIC ET 200S IM151-8 PN/DP CPU (All versions < V3.2.16), SIMATIC ET 200S IM151-8F PN/DP CPU (All versions < V3.2.16), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions < V1.7.0), SIMATIC S7-1500 Software Controller (All versions < V1.7.0), SIMATIC S7-300 CPU 314C-2 PN/DP (All versions < V3.3.16), SIMATIC S7-300 CPU 315-2 PN/DP (All versions < V3.2.16), SIMATIC S7-300 CPU 315F-2 PN/DP (All versions < V3.2.16), SIMATIC S7-300 CPU 315T-3 PN/DP (All versions < V3.2.16), SIMATIC S7-300 CPU 317-2 PN/DP (All versions < V3.2.16), SIMATIC S7-300 CPU 317F-2 PN/DP (All versions < V3.2.16), SIMATIC S7-300 CPU 317T-3 PN/DP (All versions < V3.2.16), SIMATIC S7-300 CPU 317TF-3 PN/DP (All versions < V3.2.16), SIMATIC S7-300 CPU 319-3 PN/DP (All versions < V3.2.16), SIMATIC S7-300 CPU 319F-3 PN/DP (All versions < V3.2.16), SIMATIC S7-400 CPU 412-2 PN V7 (All versions < V7.0.3), SIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants) (All versions < V6.0.9), SIMATIC S7-400 PN/DP V6 CPU family (incl. SIPLUS variants) (All versions < V6.0.7), SIMATIC S7-410 CPU family (incl. SIPLUS variants) (All versions < V8.1), SIMATIC WinAC RTX 2010 (All versions < V2010 SP3), SIMATIC WinAC RTX F 2010 (All versions < V2010 SP3), SINUMERIK 828D (All versio
Affected
47 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| siemens | simatic_cp_343-1 | — | — |
| siemens | simatic_cp_343-1_advanced | — | — |
| siemens | simatic_cp_443-1 | — | — |
| siemens | simatic_cp_443-1_advanced | — | — |
| siemens | simatic_et_200pro_im154-8_pn_dp_cpu | — | — |
| siemens | simatic_et_200pro_im154-8f_pn_dp_cpu | — | — |
| siemens | simatic_et_200pro_im154-8fx_pn_dp_cpu | — | — |
| siemens | simatic_et_200s_im151-8_pn_dp_cpu | — | — |
| siemens | simatic_et_200s_im151-8f_pn_dp_cpu | — | — |
| siemens | simatic_s7-1500_cpu_family | — | — |
| siemens | simatic_s7-1500_firmware | < 1.7.0 | 1.7.0 |
| siemens | simatic_s7-1500_software_controller | — | — |
| siemens | simatic_s7-300_cpu_314c-2_pn_dp | — | — |
| siemens | simatic_s7-300_cpu_315-2_pn_dp | — | — |
| siemens | simatic_s7-300_cpu_315f-2_pn_dp | — | — |
| siemens | simatic_s7-300_cpu_315t-3_pn_dp | — | — |
| siemens | simatic_s7-300_cpu_317-2_pn_dp | — | — |
| siemens | simatic_s7-300_cpu_317f-2_pn_dp | — | — |
| siemens | simatic_s7-300_cpu_317t-3_pn_dp | — | — |
| siemens | simatic_s7-300_cpu_317tf-3_pn_dp | — | — |
| siemens | simatic_s7-300_cpu_319-3_pn_dp | — | — |
| siemens | simatic_s7-300_cpu_319f-3_pn_dp | — | — |
| siemens | simatic_s7-400_cpu_412-2_pn_v7 | — | — |
| siemens | simatic_s7-400_cpu_414-3_pn_dp_v7 | — | — |
| siemens | simatic_s7-400_cpu_414f-3_pn_dp_v7 | — | — |
CVSS provenance
nvdv3.16.5MEDIUMCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvdv2.06.1MEDIUMAV:A/AC:L/Au:N/C:N/I:N/A:C
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
CISA ICS
Siemens SIMATIC, SINUMERIK, and PROFINET IO (Update D)
cisa_ics·2019-05-14
Siemens SIMATIC, SINUMERIK, and PROFINET IO (Update D)
ICS Advisory
##
Siemens SIMATIC, SINUMERIK, and PROFINET IO (Update D)
Last RevisedJanuary 13, 2023
Alert CodeICSA-18-079-02
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global).
## 1. EXECUTIVE SUMMARY
- CVSS v3 5.3
- ATTENTION: Exploitable from an adjacent network
- Vendor: Siemens
- Equipment: SIMATIC, SINUMERIK, and PROFINET IO
- Vulnerability: Improper Input Validation
## 2. UPDATE INFORMATION
This updated advisory is a follow-up to the advisory update titled ICSA-18-079-02 Siemens SIMATIC, SINUME
GHSA
GHSA-2cg6-w8mm-22rg: A vulnerability has been identified in SIMATIC CP 343-1 Advanced (All versions), SIMATIC CP 343-1 Standard (All versions), SIMATIC CP 443-1 Advanced (
ghsa_unreviewed·2022-05-13
CVE-2018-4843 [MEDIUM] CWE-20 GHSA-2cg6-w8mm-22rg: A vulnerability has been identified in SIMATIC CP 343-1 Advanced (All versions), SIMATIC CP 343-1 Standard (All versions), SIMATIC CP 443-1 Advanced (
A vulnerability has been identified in SIMATIC CP 343-1 Advanced (All versions), SIMATIC CP 343-1 Standard (All versions), SIMATIC CP 443-1 Advanced (All versions), SIMATIC CP 443-1 Standard (All versions), SIMATIC S7-1500 Software Controller incl. F (All versions < V1.7.0), SIMATIC S7-1500 incl. F (All versions < V1.7.0), SIMATIC S7-300 incl. F and T (All versions < V3.X.16), SIMATIC S7-400 H V6 (All versions < V6.0.9), SIMATIC S7-400 PN/DP V6 Incl. F (All versions < V6.0.7), SIMATIC S7-400 PN/DP V7 Incl. F (All versions), SIMATIC S7-410 (All versions < V8.1), SIMATIC WinAC RTX (F) 2010 (All versions < SIMATIC WinAC RTX 2010 SP3), SINUMERIK 828D (All versions < V4.7 SP6 HF1), Softnet PROFINET IO for PC-based Windows systems (All versions). Responding to a PROFINET DCP request with a speci
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2018-03-20
Published