Auth bypass in Siemens Simatic_it_line_monitoring_system
CVE-2018-13804
A vulnerability has been identified in SIMATIC IT LMS (All versions), SIMATIC IT Production Suite (Versions V7.1 < V7.1 Upd3), SIMATIC IT UA Discrete Manufacturing (Versions < V1.2), SIMATIC IT UA Discrete Manufacturing (Versions V1.2), SI…
Vulnerability class: Broken Authentication
EPSS: 0.027 (84.0th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.1 (High). Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Siemens Simatic_it_line_monitoring_system
- Siemens Simatic_it_production_suite — versions v7.1
- Siemens Simatic_it_ua_discrete_manufacturing — versions v1.3, v2.3, v2.4
- Siemens Ag Simatic It Lms, Production Suite, Ua Discrete Manufacturing, Manufacturing — versions SIMATIC IT UA Discrete Manufacturing : Versions V1.2, SIMATIC IT UA Discrete Manufacturing : Versions V1.3, SIMATIC IT Production Suite : Versions V7.1 < V7.1 Upd3
Weakness classification (CWE)
References
- productcert@siemens.com (x_refsource_CONFIRM, Vendor Advisory)
- productcert@siemens.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
Frequently asked questions
- What is CVE-2018-13804?
- CVE-2018-13804 is a high-severity vulnerability in Siemens Simatic_it_line_monitoring_system, classified under Improper Authentication. CVSS score: 8.1/10. Published 2018-12-13.
- How severe is CVE-2018-13804?
- High severity. CVSS v3 base score is 8.1 out of 10.