CVE-2018-16559
Published on: 04/17/2019 12:00:00 AM UTC
Last Modified on: 03/23/2021 11:24:34 PM UTC
Certain versions of Simatic S7-1500 from Siemens contain the following vulnerability:
A vulnerability has been identified in SIMATIC S7-1500 CPU (All versions >= V2.0 and < V2.5), SIMATIC S7-1500 CPU (All versions <= V1.8.5). Specially crafted network packets sent to port 80/tcp or 443/tcp could allow an unauthenticated remote attacker to cause a Denial-of-Service condition of the device. The security vulnerability could be exploited by an attacker with network access to the affected systems on port 80/tcp or 443/tcp. Successful exploitation requires no system privileges and no user interaction. An attacker could use the vulnerability to compromise availability of the device. At the time of advisory publication no public exploitation of this security vulnerability was known.
- CVE-2018-16559 has been assigned by
productc[email protected] to track the vulnerability - currently rated as HIGH severity.
- Affected Vendor/Software:
Siemens - SIMATIC S7-1500 CPU version All versions >= V2.0 and < V2.5
- Affected Vendor/Software:
Siemens - SIMATIC S7-1500 CPU version All versions <= V1.8.5
CVSS3 Score: 7.5 - HIGH
Attack Vector ⓘ |
Attack Complexity |
Privileges Required |
User Interaction |
---|---|---|---|
NETWORK | LOW | NONE | NONE |
Scope | Confidentiality Impact |
Integrity Impact |
Availability Impact |
UNCHANGED | NONE | NONE | HIGH |
CVSS2 Score: 7.8 - HIGH
Access Vector ⓘ |
Access Complexity |
Authentication |
---|---|---|
NETWORK | LOW | NONE |
Confidentiality Impact |
Integrity Impact |
Availability Impact |
NONE | NONE | COMPLETE |
CVE References
Description | Tags ⓘ | Link |
---|---|---|
Vendor Advisory cert-portal.siemens.com application/pdf |
![]() |
Related QID Numbers
- 591210 Siemens SIMATIC S7-1500 CPU Improper Input Validation Multiple Vulnerabilities (ICSA-19-036-04, SSA-180635)
Known Affected Configurations (CPE V2.3)
Type | Vendor | Product | Version | Update | Edition | Language |
---|---|---|---|---|---|---|
Hardware
| Siemens | Simatic S7-1500 | - | All | All | All |
Hardware
| Siemens | Simatic S7-1500 | - | All | All | All |
Operating System | Siemens | Simatic S7-1500 Firmware | All | All | All | All |
Operating System | Siemens | Simatic S7-1500 Firmware | All | All | All | All |
Operating System | Siemens | Simatic S7-1500 Firmware | All | All | All | All |
- cpe:2.3:h:siemens:simatic_s7-1500:-:*:*:*:*:*:*:*:
- cpe:2.3:h:siemens:simatic_s7-1500:-:*:*:*:*:*:*:*:
- cpe:2.3:o:siemens:simatic_s7-1500_firmware:*:*:*:*:*:*:*:*:
- cpe:2.3:o:siemens:simatic_s7-1500_firmware:*:*:*:*:*:*:*:*:
- cpe:2.3:o:siemens:simatic_s7-1500_firmware:*:*:*:*:*:*:*:*: