CVE-2018-4850 — Improper Input Validation in Siemens Simatic S7-400 Firmware

CWE-20 — Improper Input Validation3 documents3 sources
Severity
7.5HIGHNVD
EPSS
0.5%
top 33.55%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Siemens Simatic S7-400 FirmwareSiemens Simatic S7-400h Firmware
Timeline
PublishedMay 16
Latest updateMay 13

Description

A vulnerability has been identified in SIMATIC S7-400 (incl. F) CPU hardware version 4.0 and below (All versions), SIMATIC S7-400 (incl. F) CPU hardware version 5.0 (All firmware versions < V5.2), SIMATIC S7-400H CPU hardware version 4.5 and below (All versions). The affected CPUs improperly validate S7 communication packets which could cause a Denial-of-Service condition of the CPU. The CPU will remain in DEFECT mode until manual restart.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-9c5r-829c-7rjc: A vulnerability has been identified in SIMATIC S7-400 (incl↗2022-05-13
▶
CVEList
CVE-2018-4850: A vulnerability has been identified in SIMATIC S7-400 (incl↗2018-05-16
▶
CVE-2018-4850 — Improper Input Validation in Siemens | cvebase