CVE-2018-11458

🗓️ 12 Dec 2018 16:00:00Reported by siemensType

Vulnerability in SINUMERIK 828D and 840D VNC servers allows remote code execution

Reporter	Title	Published	Views	Family All 6
CNVD	Integer Overflow Vulnerability in Multiple Siemens Products	14 Dec 201800:00	–	cnvd
Cvelist	CVE-2018-11458	12 Dec 201816:00	–	cvelist
EUVD	EUVD-2018-3489	7 Oct 202500:30	–	euvd
ICS	ICSA-18-345-02 Siemens SINUMERIK Controllers (Update A)	11 Dec 201800:00	–	ics
NVD	CVE-2018-11458	12 Dec 201816:29	–	nvd
Prion	Code injection	12 Dec 201816:29	–	prion

NVD

Node

siemens sinumerik_828d_v4.7_firmwareRange≤4.7

AND

siemens sinumerik_828d_v4.7Match-

Node

siemens sinumerik_840d_sl_v4.7_firmwareRange≤4.7

AND

siemens sinumerik_840d_sl_v4.7Match-

Node

siemens sinumerik_840d_sl_v4.8_firmwareRange≤4.8

AND

siemens sinumerik_840d_sl_v4.8Match-

[
  {
    "product": "SINUMERIK 828D V4.7, SINUMERIK 840D sl V4.7, SINUMERIK 840D sl V4.8",
    "vendor": "Siemens AG",
    "versions": [
      {
        "status": "affected",
        "version": "SINUMERIK 828D V4.7 : All versions < V4.7 SP6 HF1"
      },
      {
        "status": "affected",
        "version": "SINUMERIK 840D sl V4.7 : All versions < V4.7 SP6 HF5"
      },
      {
        "status": "affected",
        "version": "SINUMERIK 840D sl V4.8 : All versions < V4.8 SP3"
      }
    ]
  }
]

Source	Link
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-170881.pdf
securityfocus	www.securityfocus.com/bid/106185

21 Nov 2024 03:43Current

7.8High risk

Vulners AI Score7.8

CVSS 38.1

CVSS 29.3

EPSS0.01319

CWE-190