CVE-2018-13807

🗓️ 12 Sep 2018 14:00:00Reported by siemensType

A vulnerability in SCALANCE X300, X408, X414 could result in a Denial-of-Service condition

Reporter	Title	Published	Views	Family All 8
Tenable Nessus	Siemens SCALANCE X Switches Improper Input Validation	8 May 201900:00	–	nessus
Tenable Nessus	Siemens SCALANCE X Switches (CVE-2018-13807)	25 Jan 202300:00	–	nessus
CNVD	Siemens SCALANCE X Switches Input Validation Vulnerability	13 Sep 201800:00	–	cnvd
Cvelist	CVE-2018-13807	12 Sep 201814:00	–	cvelist
EUVD	EUVD-2018-5743	7 Oct 202500:30	–	euvd
ICS	Siemens SCALANCE X Switches	11 Sep 201800:00	–	ics
NVD	CVE-2018-13807	12 Sep 201813:29	–	nvd
Prion	Design/Logic Flaw	12 Sep 201813:29	–	prion

NVD

Node

siemens scalance_x408_firmwareRange<4.0.0

AND

siemens scalance_x408Match-

Node

siemens scalance_x300_firmwareRange<4.0.0

AND

siemens scalance_x300Match-

Node

siemens scalance_x414_firmwareMatch-

AND

siemens scalance_x414Match-

[
  {
    "product": "SCALANCE X300, SCALANCE X408, SCALANCE X414",
    "vendor": "Siemens AG",
    "versions": [
      {
        "status": "affected",
        "version": "SCALANCE X300 : All versions < V4.0.0"
      },
      {
        "status": "affected",
        "version": "SCALANCE X408 : All versions < V4.0.0"
      },
      {
        "status": "affected",
        "version": "SCALANCE X414 : All versions"
      }
    ]
  }
]

Source	Link
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-447396.pdf
securityfocus	www.securityfocus.com/bid/105331
ics-cert	www.ics-cert.us-cert.gov/advisories/ICSA-18-254-05

21 Nov 2024 03:48Current

8.1High risk

Vulners AI Score8.1

CVSS 27.8

CVSS 38.6

EPSS0.00804

CWE-20