Auth bypass in Siemens Simatic It Line Monitoring System
CVE-2018-13804
A vulnerability has been identified in SIMATIC IT LMS (All versions), SIMATIC IT Production Suite (Versions V7.1 < V7.1 Upd3), SIMATIC IT UA Discrete Manufacturing (Versions < V1.2), SIMATIC IT UA Discrete Manufacturing (Versions V1.2), SIMATIC IT UA Discrete Manufacturing (Versions V1.3), SIMATIC IT UA Discrete Manufacturing (Versions V2.3), SIMATIC IT UA Discrete Manufacturing (Versions V2.4). An attacker with network access to the installation could bypass the application-level authentication. In order to exploit the vulnerability, an attacker must obtain network access to an affected installation and must obtain a valid username to the system. Successful exploitation requires no user privileges and no user interaction. The vulnerability could allow an attacker to compromise confidentiality, integrity and availability of the system. At the time of advisory publication no public exploitation of this vulnerability was known.
Vulnerability class: Broken Authentication
Published · last modified .
CVSS v3 metric
CVSS v3 base score 8.1 (High). Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.027 (85.5th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 85th percentile — 85.5% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.023 · newest: 0.027 · change: +0.003
Affected products
- Siemens Simatic It Line Monitoring System
- Siemens Simatic It Production Suite — versions v7.1
- Siemens Simatic It Ua Discrete Manufacturing — versions v1.3, v2.3, v2.4
- Siemens Ag Simatic It Lms, Production Suite, Ua Discrete Manufacturing, Manufacturing — versions SIMATIC IT UA Discrete Manufacturing : Versions V1.2, SIMATIC IT UA Discrete Manufacturing : Versions V1.3, SIMATIC IT Production Suite : Versions V7.1 < V7.1 Upd3
Weakness classification (CWE)
References
- cert-portal.siemens.com/productcert/pdf/ssa-886615.pdf (Vendor Advisory)
- www.securityfocus.com/bid/105924 (VDB Entry, Third Party Advisory, vdb-entry)
Frequently asked questions
- What is CVE-2018-13804?
- CVE-2018-13804 is a high-severity vulnerability in Siemens Simatic It Line Monitoring System, classified under Improper Authentication. CVSS score: 8.1/10. Published 2018-12-13.
- How severe is CVE-2018-13804?
- High severity. CVSS v3 base score is 8.1 out of 10.