Lucene search

K
cvelistSiemensCVELIST:CVE-2018-13798
HistoryMar 21, 2019 - 6:48 p.m.

CVE-2018-13798

2019-03-2118:48:48
siemens
www.cve.org
6

AI Score

7.5

Confidence

High

EPSS

0.002

Percentile

59.8%

A vulnerability has been identified in SICAM A8000 CP-8000 (All versions < V14), SICAM A8000 CP-802X (All versions < V14), SICAM A8000 CP-8050 (All versions < V2.00). Specially crafted network packets sent to port 80/TCP or 443/TCP could allow an unauthenticated remote attacker to cause a Denial-of-Service condition of the web server. The security vulnerability could be exploited by an attacker with network access to the affected systems on port 80/TCP or 443/TCP. Successful exploitation requires no system privileges and no user interaction. An attacker could use the vulnerability to compromise availability of the web server. A system reboot is required to recover the web service of the device. At the time of advisory update, exploit code for this security vulnerability is public.

CNA Affected

[
  {
    "product": "SICAM A8000 CP-8000, SICAM A8000 CP-802X, SICAM A8000 CP-8050",
    "vendor": "Siemens AG",
    "versions": [
      {
        "status": "affected",
        "version": "SICAM A8000 CP-8000 : All versions < V14"
      }
    ]
  },
  {
    "product": "SICAM A8000 CP-802X",
    "vendor": "Siemens AG",
    "versions": [
      {
        "status": "affected",
        "version": "SICAM A8000 CP-802X : All versions < V14"
      }
    ]
  },
  {
    "product": "SICAM A8000 CP-8050",
    "vendor": "Siemens AG",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V2.00"
      }
    ]
  }
]

AI Score

7.5

Confidence

High

EPSS

0.002

Percentile

59.8%

Related for CVELIST:CVE-2018-13798