Vulnerability in Siemens Simatic_step_7_\(tia_portal\)
CVE-2018-11454
A vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V10, V11, V12 (All versions), SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V13 (All versions < V13 SP2 Update 2), SIMATIC STEP 7 (TIA Portal) a…
EPSS: 0.004 (35.9th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.6 (High). Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H.
Affected products
- Siemens Simatic_step_7_\(tia_portal\) — versions 10.0, 11.0, 12.0
- Siemens Simatic_wincc_\(tia_portal\) — versions 10.0, 11.0, 12.0
- Siemens Ag Simatic Step 7 (Tia Portal) And Wincc V10, V11, V12, V13, V14, V15 — versions SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V14 : All versions < V14 SP1 Update 6, SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V13 : All versions < V13 SP2 Update 2, SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V10, V11, V12 : All versions
Weakness classification (CWE)
References
- productcert@siemens.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
- productcert@siemens.com (x_refsource_CONFIRM, Vendor Advisory)
Frequently asked questions
- What is CVE-2018-11454?
- CVE-2018-11454 is a high-severity vulnerability in Siemens Simatic_step_7_\(tia_portal\), classified under Incorrect Default Permissions. CVSS score: 8.6/10. Published 2018-08-07.
- How severe is CVE-2018-11454?
- High severity. CVSS v3 base score is 8.6 out of 10.