CVE-2018-13813

🗓️ 13 Dec 2018 16:00:00Reported by siemensType

Vulnerability in SIMATIC HMI Panels allowing URL redirectio

Reporter	Title	Published	Views	Family All 9
Tenable Nessus	Siemens SIMATIC HMI Panels < 15.4 Integrated Webserver URL Redirection	8 May 201900:00	–	nessus
Tenable Nessus	Siemens SIMATIC WinCC (TIA Portal) < 15 Update 4 Multiple Vulnerabilities (SSA-233109)	24 May 201900:00	–	nessus
CNVD	Redirection Vulnerability Open in Multiple Siemens Products	16 Nov 201800:00	–	cnvd
Cvelist	CVE-2018-13813	13 Dec 201816:00	–	cvelist
EUVD	EUVD-2018-5749	7 Oct 202500:30	–	euvd
ICS	Siemens SIMATIC Panels	13 Nov 201800:00	–	ics
NVD	CVE-2018-13813	13 Dec 201816:29	–	nvd
OSV	CVE-2018-13813	13 Dec 201816:29	–	osv
Prion	Code injection	13 Dec 201816:29	–	prion

NVD

Node

siemens simatic_hmi_comfort_panels_firmwareRange≤15.0

AND

siemens simatic_hmi_comfort_panelsMatch-

Node

siemens simatic_hmi_comfort_outdoor_panels_firmwareRange≤15.0

AND

siemens simatic_hmi_comfort_outdoor_panelsMatch-

Node

siemens simatic_hmi_ktp_mobile_panels_ktp400f_firmwareRange≤15.0

AND

siemens simatic_hmi_ktp_mobile_panels_ktp400fMatch-

Node

siemens simatic_hmi_ktp_mobile_panels_ktp700_firmwareRange≤15.0

AND

siemens simatic_hmi_ktp_mobile_panels_ktp700Match-

Node

siemens simatic_hmi_ktp_mobile_panels_ktp700f_firmwareRange≤15.0

AND

siemens simatic_hmi_ktp_mobile_panels_ktp700fMatch-

Node

siemens simatic_hmi_ktp_mobile_panels_ktp900_firmwareRange≤15.0

AND

siemens simatic_hmi_ktp_mobile_panels_ktp900Match-

Node

siemens simatic_hmi_ktp_mobile_panels_ktp900f_firmwareRange≤15.0

AND

siemens simatic_hmi_ktp_mobile_panels_ktp900fMatch-

Node

siemens simatic_wincc_(tia_portal)Range≤15.0

siemens simatic_wincc_runtimeRange≤15.0advanced

siemens simatic_wincc_runtimeRange≤15.0professional

Node

siemens simatic_hmi_tp_firmware

AND

siemens simatic_hmi_tpMatch-

Node

siemens simatic_hmi_mp_firmware

AND

siemens simatic_hmi_mpMatch-

Node

siemens simatic_hmi_op_firmware

AND

siemens simatic_hmi_opMatch-

[
  {
    "product": "SIMATIC HMI Comfort Panels 4\" - 22\", SIMATIC HMI Comfort Outdoor Panels 7\" & 15\", SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 und KTP900F, SIMATIC WinCC Runtime Advanced, SIMATIC WinCC Runtime Professional, SIMATIC WinCC (TIA Portal), SIMATIC HMI Classic Devices (TP/MP/OP/MP Mobile Panel)",
    "vendor": "Siemens AG",
    "versions": [
      {
        "status": "affected",
        "version": "SIMATIC HMI Comfort Panels 4\" - 22\" : All versions < V15 Update 4"
      },
      {
        "status": "affected",
        "version": "SIMATIC HMI Comfort Outdoor Panels 7\" & 15\" : All versions < V15 Update 4"
      },
      {
        "status": "affected",
        "version": "SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 und KTP900F : All versions < V15 Update 4"
      },
      {
        "status": "affected",
        "version": "SIMATIC WinCC Runtime Advanced : All versions < V15 Update 4"
      },
      {
        "status": "affected",
        "version": "SIMATIC WinCC Runtime Professional : All versions < V15 Update 4"
      },
      {
        "status": "affected",
        "version": "SIMATIC WinCC (TIA Portal) : All versions < V15 Update 4"
      },
      {
        "status": "affected",
        "version": "SIMATIC HMI Classic Devices (TP/MP/OP/MP Mobile Panel) : All versions"
      }
    ]
  }
]

Source	Link
securityfocus	www.securityfocus.com/bid/105922
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-233109.pdf

21 Nov 2024 03:48Current

7.6High risk

Vulners AI Score7.6

CVSS 25.8

CVSS 38.1

EPSS0.00255

CWE-601