01 Record

CVE-2018-4832

A vulnerability has been identified in OpenPCS 7 V7.1 and earlier (All versions), OpenPCS 7 V8.0 (All versions), OpenPCS 7 V8.1 (All versions < V8.1 Upd5), OpenPCS 7 V8.2 (All versions), OpenPCS 7

UnratedPUBLISHEDCNA: siemens

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

A vulnerability has been identified in OpenPCS 7 V7.1 and earlier (All versions), OpenPCS 7 V8.0 (All versions), OpenPCS 7 V8.1 (All versions < V8.1 Upd5), OpenPCS 7 V8.2 (All versions), OpenPCS 7

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 2.44% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 82.8% of scored records. A rank, not a probability.
NVD base score: 7.5 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NVD analysis status: Modified. NVD last modified this record on 2026-06-17.
Red Hat severity: No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2018-04-24 17:00Z8 YR AGO

Last updated

2024-08-05 05:18Z2 YR AGO

Reserved

2018-01-02

Assigning CNA

siemens

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-20Improper Input ValidationClass

Data version

5.1

Document digest

854d7f7c5d95dbf164c1cae936febd27c83556ebf76742b2707b03943cc3a0bd

05 Affected products

VendorProductVersionsPlatforms

SiemensOpenPCS 7 V7.1 and earlierAll versions—

SiemensOpenPCS 7 V8.0All versions—

SiemensOpenPCS 7 V8.1All versions < V8.1 Upd5—

SiemensOpenPCS 7 V8.2All versions—

SiemensOpenPCS 7 V9.0All versions < V9.0 Upd1—

SiemensSIMATIC BATCH V7.1 and earlierAll versions—

SiemensSIMATIC BATCH V8.0All versions < V8.0 SP1 Upd21—

SiemensSIMATIC BATCH V8.1All versions < V8.1 SP1 Upd16—

SiemensSIMATIC BATCH V8.2All versions < V8.2 Upd10—

SiemensSIMATIC BATCH V9.0All versions < V9.0 SP1—

SiemensSIMATIC NET PC Software V14All versions < V14 SP1 Update 14—

SiemensSIMATIC NET PC Software V15All versions < 15 SP1—

SiemensSIMATIC PCS 7 V7.1 and earlierAll versions—

SiemensSIMATIC PCS 7 V8.0All versions—

SiemensSIMATIC PCS 7 V8.1All versions—

SiemensSIMATIC PCS 7 V8.2All versions < V8.2 SP1—

SiemensSIMATIC PCS 7 V9.0All versions < V9.0 SP1—

SiemensSIMATIC Route Control V7.1 and earlierAll versions—

SiemensSIMATIC Route Control V8.0All versions—

SiemensSIMATIC Route Control V8.1All versions—

SiemensSIMATIC Route Control V8.2All versions—

SiemensSIMATIC Route Control V9.0All versions < V9.0 Upd1—

SiemensSIMATIC WinCC Runtime Professional V13All versions < V13 SP2 Upd2—

SiemensSIMATIC WinCC Runtime Professional V14All versions < V14 SP1 Upd5—

SiemensSIMATIC WinCC V7.2 and earlierAll versions < WinCC 7.2 Upd 15—

SiemensSIMATIC WinCC V7.3All versions < WinCC 7.3 Upd 16—

SiemensSIMATIC WinCC V7.4All versions < V7.4 SP1 Upd 4—

SiemensSPPA-T3000 Application ServerAll versions < Service Pack R8.2 SP2—

06 References

cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/pdf/ssa-451445.pdfx_refsource_MISC
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/pdf/ssa-348629.pdfx_refsource_MISC
packetstormsecurity.comhttp://packetstormsecurity.com/files/155665/Siemens-Security-Advisory-SPPA-T3000-Code-Execution.htmlx_refsource_MISC

01 Record index

CVE-2018-4832

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2018-4832

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References