Privilege escalation in Siemens Rapidlab 1200
CVE-2018-4845
A vulnerability has been identified in RAPIDLab 1200 systems / RAPIDPoint 400 systems / RAPIDPoint 500 systems (All versions_without_ use of Siemens Healthineers Informatics products), RAPIDLab 1200 Series (All versions < V3.3 _with_ Siemens Healthineers Informatics products), RAPIDPoint 500 systems (All versions >= V3.0 _with_ Siemens Healthineers Informatics products), RAPIDPoint 500 systems (V2.4.X_with_ Siemens Healthineers Informatics products), RAPIDPoint 500 systems (All versions =< V2.3 _with_ Siemens Healthineers Informatics products), RAPIDPoint 400 systems (All versions _with_ Siemens Healthineers Informatics products). Remote attackers with either local or remote credentialed access to the "Remote View" feature might be able to elevate their privileges, compromising confidentiality, integrity, and availability of the system. No special skills or user interaction are required to perform this attack. At the time of advisory publication, no public exploitation of this security vulnerability is known. Siemens Healthineers confirms the security vulnerability and provides mitigations to resolve the security issue.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.012 (66.0th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 66th percentile — 66.0% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.012 · newest: 0.012 · change: 0.000
Affected products
- Siemens Rapidlab 1200
- Siemens Rapidlab 1200 Firmware
- Siemens Rapidpoint 400
- Siemens Rapidpoint 400 Firmware
- Siemens Rapidpoint 500
- Siemens Rapidpoint 500 Firmware
- Siemens Ag Rapidlab 1200 Systems / Rapidpoint 400 500 Systems, Series, — versions RAPIDLab 1200 systems / RAPIDPoint 400 systems / RAPIDPoint 500 systems : All versions _without_ use of Siemens Healthineers Informatics products, RAPIDLab 1200 Series : All versions < V3.3 _with_ Siemens Healthineers Informatics products, RAPIDPoint 500 systems : All versions >= V3.0 _with_ Siemens Healthineers Informatics products
Weakness classification (CWE)
References
- cert-portal.siemens.com/productcert/pdf/ssa-755010.pdf (Third Party Advisory)
Frequently asked questions
- What is CVE-2018-4845?
- CVE-2018-4845 is a high-severity vulnerability in Siemens Rapidlab 1200, classified under Improper Access Control. CVSS score: 8.8/10. Published 2018-06-26.
- How severe is CVE-2018-4845?
- High severity. CVSS v3 base score is 8.8 out of 10.