Multiple Siemens SIMATIC Products CVE-2018-13805 Denial of Service Vulnerability

Bugtraq ID:	105712
Class:	Input Validation Error
CVE:	CVE-2018-13805
Remote:	Yes
Local:	No
Published:	Oct 09 2018 12:00AM
Updated:	Oct 09 2018 12:00AM
Credit:	Marcin Dudek, Jacek Gajewski, Kinga Staszkiewicz, Jakub Suchorab, and Joanna Walkiewicz from National Centre for Nuclear Research Poland
Vulnerable:	Siemens SIMATIC S7-1500 Software Controller 2.0 Siemens SIMATIC S7-1500 2.0 Siemens SIMATIC ET 200SP Open Controller 2.0
Not Vulnerable:	Siemens SIMATIC S7-1500 Software Controller 2.5 Siemens SIMATIC S7-1500 2.5

Multiple Siemens SIMATIC Products CVE-2018-13805 Denial of Service Vulnerability

Multiple Siemens SIMATIC Products are prone to a denial-of-service vulnerability.

Remote attackers may exploit this issue to cause denial-of-service conditions, denying service to legitimate users.

The following products and versions are vulnerable:

Simatic S7-1500 (incl. F) versions 2.x prior to 2.5
Simatic S7-1500 Software Controller versions 2.x prior to 2.5
Simatic ET 200SP Open Controller 2.0 and later

Multiple Siemens SIMATIC Products CVE-2018-13805 Denial of Service Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].