Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2018-4833

A vulnerability has been identified in RFID 181EIP (All versions), RUGGEDCOM Win (V4.4, V4.5, V5.0, and V5.1), SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.3), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.4.1), SCALANCE X-200RNA switch family (All versions < V3.2.6), SCALANCE X-300 switch family (incl. SIPLUS NET variants) (All versions < V4.1.3), SCALANCE X408 (All versions < V4.1.3), SCALANCE X414 (All versions), SIMATIC RF182C (All versions). Unprivileged remote attackers located in the same local network segment (OSI Layer 2) could gain remote code execution on the affected products by sending a specially crafted DHCP response to a client's DHCP request.

Published

2018-06-14T16:29:00.333

Last Modified

2024-11-21T04:07:32.737

Status

Modified

Source

[email protected]

Severity

CVSSv3.0: 8.8 (HIGH)

CVSSv2 Vector

AV:A/AC:L/Au:N/C:P/I:P/A:P

  • Access Vector: ADJACENT_NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

6.5

Impact Score

6.4

Weaknesses
  • Type: Primary
    CWE-122
  • Type: Secondary
    CWE-20
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System siemens rfid_181-eip_firmware - Yes
Hardware siemens rfid_181-eip - No
Operating System siemens ruggedcom_wimax_firmware 4.4 Yes
Operating System siemens ruggedcom_wimax_firmware 4.5 Yes
Hardware siemens ruggedcom_wimax - No
Operating System siemens scalance_x200_firmware < 5.2.3 Yes
Hardware siemens scalance_x200 - No
Operating System siemens scalance_x200irt_firmware < 5.4.1 Yes
Hardware siemens scalance_x200irt - No
Operating System siemens scalance_x204rna_firmware - Yes
Hardware siemens scalance_x204rna - No
Operating System siemens scalance_x300_firmware - Yes
Hardware siemens scalance_x300 - No
Operating System siemens scalance_x408_firmware - Yes
Hardware siemens scalance_x408 - No
Operating System siemens scalance_x414_firmware - Yes
Hardware siemens scalance_x414 - No
Operating System siemens simatic_rf182c_firmware - Yes
Hardware siemens simatic_rf182c - No
References