CVE-2018-13812

🗓️ 13 Dec 2018 16:29:00Reported by [email protected]Type

nvd

nvd🔗 web.nvd.nist.gov👁 14 Views

Vulnerability in SIMATIC HMI Panels, WinCC, and Classic Device

Reporter	Title	Published	Views	Family All 6
Tenable Nessus	Siemens SIMATIC HMI Panels < 15.4 Directory Traversal	8 May 201900:00	–	nessus
CVE	CVE-2018-13812	13 Dec 201816:00	–	cve
Cvelist	CVE-2018-13812	13 Dec 201816:00	–	cvelist
EUVD	EUVD-2018-5748	7 Oct 202500:30	–	euvd
ICS	Siemens SIMATIC Panels	13 Nov 201800:00	–	ics
Prion	Directory traversal	13 Dec 201816:29	–	prion

NVD

Node

siemens simatic_hmi_comfort_panels_firmwareRange≤15.0

AND

siemens simatic_hmi_comfort_panelsMatch-

Node

siemens simatic_hmi_comfort_outdoor_panels_firmwareRange≤15.0

AND

siemens simatic_hmi_comfort_outdoor_panelsMatch-

Node

siemens simatic_hmi_ktp_mobile_panels_ktp400f_firmwareRange≤15.0

AND

siemens simatic_hmi_ktp_mobile_panels_ktp400fMatch-

Node

siemens simatic_hmi_ktp_mobile_panels_ktp700_firmwareRange≤15.0

AND

siemens simatic_hmi_ktp_mobile_panels_ktp700Match-

Node

siemens simatic_hmi_ktp_mobile_panels_ktp700f_firmwareRange≤15.0

AND

siemens simatic_hmi_ktp_mobile_panels_ktp700fMatch-

Node

siemens simatic_hmi_ktp_mobile_panels_ktp900_firmwareRange≤15.0

AND

siemens simatic_hmi_ktp_mobile_panels_ktp900Match-

Node

siemens simatic_hmi_ktp_mobile_panels_ktp900f_firmwareRange≤15.0

AND

siemens simatic_hmi_ktp_mobile_panels_ktp900fMatch-

Node

siemens simatic_wincc_(tia_portal)Range≤15.0

OR

siemens simatic_wincc_runtimeRange≤15.0advanced

OR

siemens simatic_wincc_runtimeRange≤15.0professional

Node

siemens simatic_hmi_tp_firmware

AND

siemens simatic_hmi_tpMatch-

Node

siemens simatic_hmi_mp_firmware

AND

siemens simatic_hmi_mpMatch-

Node

siemens simatic_hmi_op_firmware

AND

siemens simatic_hmi_opMatch-

Source	Link
securityfocus	www.securityfocus.com/bid/105922
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-233109.pdf

21 Nov 2024 03:48Current

7.7High risk

Vulners AI Score7.7

CVSS 25

CVSS 37.5

EPSS0.07897

simatic hmi wincc directory traversal confidentiality network access