CVE-2018-4834

🗓️ 24 Jan 2018 16:00:00Reported by siemensType

A vulnerability in multiple versions of Desigo devices allows remote attackers to upload firmware without authentication

Reporter	Title	Published	Views	Family All 11
CNVD	Siemens DESIGO PX Firmware File Upload Vulnerability	25 Jan 201800:00	–	cnvd
Cvelist	CVE-2018-4834	24 Jan 201816:00	–	cvelist
EUVD	EUVD-2018-16620	7 Oct 202500:30	–	euvd
ICS	Siemens Desigo PXC	25 Jan 201800:00	–	ics
ICS	Siemens Desigo PXC (Update A)	25 Jan 201800:00	–	ics
ICS	Siemens Desigo PXC (Update C)	24 Jan 201800:00	–	ics
NVD	CVE-2018-4834	24 Jan 201816:29	–	nvd
Prion	Authentication flaw	24 Jan 201816:29	–	prion
Positive Technologies	PT-2018-16559 · Siemens · Desigo Pxc22.1-E.D +10	24 Jan 201800:00	–	ptsecurity
RedhatCVE	CVE-2018-4834	9 Jan 202608:54	–	redhatcve

NVD

Node

siemens pxc12/22/36-e.d_firmwareRange<6.00.204

AND

siemens pxc12/22/36-e.dMatch-

Node

siemens pxc00/50/100/200-e.d_firmwareRange<6.00.204

AND

siemens pxc00/50/100/200-e.dMatch-

Node

siemens pxc00/64/128-u_firmwareRange<6.00.204

AND

siemens pxc00/64/128-uMatch-

Node

siemens pxc001-e.d_firmwareRange<6.00.204

AND

siemens pxc001-e.dMatch-

Node

siemens pxm20-e_firmwareRange<6.00.204

AND

siemens pxm20-eMatch-

[
  {
    "vendor": "Siemens",
    "product": "Desigo PXC00-E.D V4.10",
    "versions": [
      {
        "version": "All versions < V4.10.111",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "Desigo PXC00-E.D V5.00",
    "versions": [
      {
        "version": "All versions < V5.0.171",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "Desigo PXC00-E.D V5.10",
    "versions": [
      {
        "version": "All versions < V5.10.69",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "Desigo PXC00-E.D V6.00",
    "versions": [
      {
        "version": "All versions < V6.0.204",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "Desigo PXC00/64/128-U V4.10",
    "versions": [
      {
        "version": "All versions < V4.10.111 only with web module",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "Desigo PXC00/64/128-U V5.00",
    "versions": [
      {
        "version": "All versions < V5.0.171 only with web module",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "Desigo PXC00/64/128-U V5.10",
    "versions": [
      {
        "version": "All versions < V5.10.69 only with web module",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "Desigo PXC00/64/128-U V6.00",
    "versions": [
      {
        "version": "All versions < V6.0.204 only with web module",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "Desigo PXC001-E.D V4.10",
    "versions": [
      {
        "version": "All versions < V4.10.111",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "Desigo PXC001-E.D V5.00",
    "versions": [
      {
        "version": "All versions < V5.0.171",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "Desigo PXC001-E.D V5.10",
    "versions": [
      {
        "version": "All versions < V5.10.69",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "Desigo PXC001-E.D V6.00",
    "versions": [
      {
        "version": "All versions < V6.0.204",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "Desigo PXC100-E.D V4.10",
    "versions": [
      {
        "version": "All versions < V4.10.111",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "Desigo PXC100-E.D V5.00",
    "versions": [
      {
        "version": "All versions < V5.0.171",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "Desigo PXC100-E.D V5.10",
    "versions": [
      {
        "version": "All versions < V5.10.69",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "Desigo PXC100-E.D V6.00",
    "versions": [
      {
        "version": "All versions < V6.0.204",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "Desigo PXC12-E.D V4.10",
    "versions": [
      {
        "version": "All versions < V4.10.111",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "Desigo PXC12-E.D V5.00",
    "versions": [
      {
        "version": "All versions < V5.0.171",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "Desigo PXC12-E.D V5.10",
    "versions": [
      {
        "version": "All versions < V5.10.69",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "Desigo PXC12-E.D V6.00",
    "versions": [
      {
        "version": "All versions < V6.0.204",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "Desigo PXC200-E.D V4.10",
    "versions": [
      {
        "version": "All versions < V4.10.111",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "Desigo PXC200-E.D V5.00",
    "versions": [
      {
        "version": "All versions < V5.0.171",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "Desigo PXC200-E.D V5.10",
    "versions": [
      {
        "version": "All versions < V5.10.69",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "Desigo PXC200-E.D V6.00",
    "versions": [
      {
        "version": "All versions < V6.0.204",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "Desigo PXC22-E.D V4.10",
    "versions": [
      {
        "version": "All versions < V4.10.111",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "Desigo PXC22-E.D V5.00",
    "versions": [
      {
        "version": "All versions < V5.0.171",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "Desigo PXC22-E.D V5.10",
    "versions": [
      {
        "version": "All versions < V5.10.69",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "Desigo PXC22-E.D V6.00",
    "versions": [
      {
        "version": "All versions < V6.0.204",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "Desigo PXC22.1-E.D V4.10",
    "versions": [
      {
        "version": "All versions < V4.10.111",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "Desigo PXC22.1-E.D V5.00",
    "versions": [
      {
        "version": "All versions < V5.0.171",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "Desigo PXC22.1-E.D V5.10",
    "versions": [
      {
        "version": "All versions < V5.10.69",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "Desigo PXC22.1-E.D V6.00",
    "versions": [
      {
        "version": "All versions < V6.0.204",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "Desigo PXC36.1-E.D V4.10",
    "versions": [
      {
        "version": "All versions < V4.10.111",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "Desigo PXC36.1-E.D V5.00",
    "versions": [
      {
        "version": "All versions < V5.0.171",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "Desigo PXC36.1-E.D V5.10",
    "versions": [
      {
        "version": "All versions < V5.10.69",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "Desigo PXC36.1-E.D V6.00",
    "versions": [
      {
        "version": "All versions < V6.0.204",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "Desigo PXC50-E.D V4.10",
    "versions": [
      {
        "version": "All versions < V4.10.111",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "Desigo PXC50-E.D V5.00",
    "versions": [
      {
        "version": "All versions < V5.0.171",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "Desigo PXC50-E.D V5.10",
    "versions": [
      {
        "version": "All versions < V5.10.69",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "Desigo PXC50-E.D V6.00",
    "versions": [
      {
        "version": "All versions < V6.0.204",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "Desigo PXM20-E V4.10",
    "versions": [
      {
        "version": "All versions < V4.10.111",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "Desigo PXM20-E V5.00",
    "versions": [
      {
        "version": "All versions < V5.0.171",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "Desigo PXM20-E V5.10",
    "versions": [
      {
        "version": "All versions < V5.10.69",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "Desigo PXM20-E V6.00",
    "versions": [
      {
        "version": "All versions < V6.0.204",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  }
]

Source	Link
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-824231.pdf

21 Nov 2024 04:07Current

9.2High risk

Vulners AI Score9.2

CVSS 210

CVSS 3.19.8

EPSS0.00992