CVE-2018-13814

🗓️ 13 Dec 2018 16:00:00Reported by siemensType

A vulnerability in SIMATIC HMI Comfort Panels & WinCC could allow HTTP header injectio

Reporter	Title	Published	Views	Family All 9
Tenable Nessus	Siemens SIMATIC HMI Panels < 15.4 Integrated Webserver HTTP Header Injection	8 May 201900:00	–	nessus
CNVD	Siemens SIMATIC Panels and SIMATIC WinCC Code Injection Vulnerability	16 Nov 201800:00	–	cnvd
Cvelist	CVE-2018-13814	13 Dec 201816:00	–	cvelist
EUVD	EUVD-2018-5750	7 Oct 202500:30	–	euvd
ICS	Siemens SIMATIC Panels and SIMATIC WinCC (TIA Portal)	13 Nov 201800:00	–	ics
NVD	CVE-2018-13814	13 Dec 201816:29	–	nvd
OSV	CVE-2018-13814	13 Dec 201816:29	–	osv
Prion	Code injection	13 Dec 201816:29	–	prion
ThreatPost	Siemens Patches Firewall Flaw That Put Operations at Risk	14 Nov 201817:40	–	threatpost

NVD

Node

siemens simatic_hmi_comfort_panels_firmwareRange<14.0

AND

siemens simatic_hmi_comfort_panelsMatch-

Node

siemens simatic_hmi_comfort_outdoor_panels_firmwareRange<14.0

AND

siemens simatic_hmi_comfort_outdoor_panelsMatch-

Node

siemens simatic_hmi_ktp_mobile_panels_ktp400f_firmwareRange<14.0

AND

siemens simatic_hmi_ktp_mobile_panels_ktp400fMatch-

Node

siemens simatic_hmi_ktp_mobile_panels_ktp700_firmwareRange<14.0

AND

siemens simatic_hmi_ktp_mobile_panels_ktp700Match-

Node

siemens simatic_hmi_ktp_mobile_panels_ktp700f_firmwareRange<14.0

AND

siemens simatic_hmi_ktp_mobile_panels_ktp700fMatch-

Node

siemens simatic_hmi_ktp_mobile_panels_ktp900_firmwareRange<14.0

AND

siemens simatic_hmi_ktp_mobile_panels_ktp900Match-

Node

siemens simatic_hmi_ktp_mobile_panels_ktp900f_firmwareRange<14.0

AND

siemens simatic_hmi_ktp_mobile_panels_ktp900fMatch-

Node

siemens simatic_wincc_(tia_portal)Range<14.0

siemens simatic_wincc_runtimeRange<14.0advanced

siemens simatic_wincc_runtimeRange<14.0professional

Node

siemens simatic_hmi_tp_firmware

AND

siemens simatic_hmi_tpMatch-

Node

siemens simatic_hmi_mp_firmware

AND

siemens simatic_hmi_mpMatch-

Node

siemens simatic_hmi_op_firmware

AND

siemens simatic_hmi_opMatch-

[
  {
    "product": "SIMATIC HMI Comfort Panels 4\" - 22\", SIMATIC HMI Comfort Outdoor Panels 7\" & 15\", SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 und KTP900F, SIMATIC WinCC Runtime Advanced, SIMATIC WinCC Runtime Professional, SIMATIC WinCC (TIA Portal), SIMATIC HMI Classic Devices (TP/MP/OP/MP Mobile Panel)",
    "vendor": "Siemens AG",
    "versions": [
      {
        "status": "affected",
        "version": "SIMATIC HMI Comfort Panels 4\" - 22\" : All versions < V14"
      },
      {
        "status": "affected",
        "version": "SIMATIC HMI Comfort Outdoor Panels 7\" & 15\" : All versions < V14"
      },
      {
        "status": "affected",
        "version": "SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 und KTP900F : All versions < V14"
      },
      {
        "status": "affected",
        "version": "SIMATIC WinCC Runtime Advanced : All versions < V14"
      },
      {
        "status": "affected",
        "version": "SIMATIC WinCC Runtime Professional : All versions < V14"
      },
      {
        "status": "affected",
        "version": "SIMATIC WinCC (TIA Portal) : All versions < V14"
      },
      {
        "status": "affected",
        "version": "SIMATIC HMI Classic Devices (TP/MP/OP/MP Mobile Panel) : All versions"
      }
    ]
  }
]

Source	Link
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-944083.pdf
securityfocus	www.securityfocus.com/bid/105931

21 Nov 2024 03:48Current

8.2High risk

Vulners AI Score8.2

CVSS 26.8

CVSS 38.8

EPSS0.00429