Buffer overflow in Siemens Rfid 181eip
CVE-2018-4833
A vulnerability has been identified in RFID 181EIP (All versions), RUGGEDCOM Win (V4.4, V4.5, V5.0, and V5.1), SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.3), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.4.1), SCALANCE X-200RNA switch family (All versions < V3.2.6), SCALANCE X-300 switch family (incl. SIPLUS NET variants) (All versions < V4.1.3), SCALANCE X408 (All versions < V4.1.3), SCALANCE X414 (All versions), SIMATIC RF182C (All versions). Unprivileged remote attackers located in the same local network segment (OSI Layer 2) could gain remote code execution on the affected products by sending a specially crafted DHCP response to a client's DHCP request.
Vulnerability class: Buffer Overflow
EPSS: 0.010 (57.8th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.8 (High). Vector: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Siemens Rfid 181eip — versions All versions
- Siemens Rfid_181-eip
- Siemens Rfid_181-eip_firmware
- Siemens Ruggedcom_wimax
- Siemens Ruggedcom_wimax_firmware — versions 4.4, 4.5
- Siemens Ruggedcom Win — versions V4.4, V4.5, V5.0, and V5.1
- Siemens Scalance_x200
- Siemens Scalance_x200_firmware
- Siemens Scalance_x200irt
- Siemens Scalance_x200irt_firmware
Weakness classification (CWE)
References
- productcert@siemens.com (x_refsource_MISC, Vendor Advisory)
Frequently asked questions
- What is CVE-2018-4833?
- CVE-2018-4833 is a high-severity vulnerability in Siemens Rfid 181eip, classified under Heap-based Buffer Overflow. CVSS score: 8.8/10. Published 2018-06-14.
- How severe is CVE-2018-4833?
- High severity. CVSS v3 base score is 8.8 out of 10.