CVE-2018-13812

mediumPriorität · verfolgen · 31EPSS 0.036 · 89. PerzentilEUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

3.57% (89th) EPSS

CVSS 5 · medium

Is it mine?

33 products

Prüfe deine Angriffsfläche

Who says so?

3 sources

cnnvd · enisa_euvd · cisa_csaf_ot

EPSS · bewertet 2026-10-26

A vulnerability has been identified in SIMATIC HMI Comfort Panels 4" - 22" (All versions < V15 Update 4), SIMATIC HMI Comfort Outdoor Panels 7" & 15" (All versions < V15 Update 4), SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 and KTP900F (All versions < V15 Update 4), SIMATIC WinCC Runtime Advanced (All versions < V15 Update 4), SIMATIC WinCC Runtime Professional (All versions < V15 Update 4), SIMATIC WinCC (TIA Portal) (All versions < V15 Update 4), SIMATIC HMI Classic Devices (TP/MP/OP/MP Mobile Panel) (All versions). A directory traversal vulnerability could allow to download arbitrary files from the device. The security vulnerability could be exploited by an attacker with network access to the integrated web server. No user interaction and no authentication is required to exploit the vulnerability. The vulnerability impacts the confidentiality of the device. At the time of advisory publication no public exploitation of this security vulnerability was known.

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

BehobenSIMATIC HMI Comfort Outdoor Panels 7" & 15" (incl. SIPLUS variants)cisa_csaf_ot
Update SIMATIC WinCC (TIA Portal) to V15 Update 4 or newer, and then update panel to V15 Update 4 or newer. https://support.industry.siemens.com/cs/ww/en/view/109755826
BehobenSIMATIC HMI Comfort Panels 4" - 22" (incl. SIPLUS variants)cisa_csaf_ot
Update SIMATIC WinCC (TIA Portal) to V15 Update 4 or newer, and then update panel to V15 Update 4 or newer. https://support.industry.siemens.com/cs/ww/en/view/109755826
BehobenSIMATIC HMI KTP Mobile Panels KTP400Fcisa_csaf_ot
Update SIMATIC WinCC (TIA Portal) to V15 Update 4 or newer, and then update panel to V15 Update 4 or newer. https://support.industry.siemens.com/cs/ww/en/view/109755826
BehobenSIMATIC WinCC (TIA Portal)cisa_csaf_ot
Update to V15 Update 4 or newer https://support.industry.siemens.com/cs/ww/en/view/109755826
BehobenSIMATIC WinCC Runtime Advancedcisa_csaf_ot
Update to V15 Update 4 or newer https://support.industry.siemens.com/cs/ww/en/view/109755826
BehobenSIMATIC WinCC Runtime Professionalcisa_csaf_ot
Update to V15 Update 4 or newer https://support.industry.siemens.com/cs/ww/en/view/109755826
MitigationSIMATIC HMI Classic Devices - TP/MP/OP/MP Mobile Panel (incl. SIPLUS variants)cisa_csaf_ot
Deactivate the web server if not required. The web server is disabled by default.
MitigationSIMATIC HMI Comfort Outdoor Panels 7" & 15" (incl. SIPLUS variants)cisa_csaf_ot
Deactivate the web server if not required. The web server is disabled by default.
MitigationSIMATIC HMI Comfort Panels 4" - 22" (incl. SIPLUS variants)cisa_csaf_ot
Deactivate the web server if not required. The web server is disabled by default.
MitigationSIMATIC HMI KTP Mobile Panels KTP400Fcisa_csaf_ot
Deactivate the web server if not required. The web server is disabled by default.
MitigationSIMATIC WinCC (TIA Portal)cisa_csaf_ot
Deactivate the web server if not required. The web server is disabled by default.
MitigationSIMATIC WinCC Runtime Advancedcisa_csaf_ot
Deactivate the web server if not required. The web server is disabled by default.
MitigationSIMATIC WinCC Runtime Professionalcisa_csaf_ot
Deactivate the web server if not required. The web server is disabled by default.

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

7.5

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 5–7.5

v2.05mediumAV:N/AC:L/Au:N/C:P/I:N/A:Nprimary · NVD / NIST USAusnutzbarkeit 10 · Auswirkung 2.9

v3.07.5highCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:Nprimary · NVD / NIST USAusnutzbarkeit 3.9 · Auswirkung 3.6

v3.06.9mediumCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:Usecondary · CVSS-BT (t0sche)

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:Csecondary · CISA US

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-22USprimärCWE-22US

betroffene Produkte (33)

Betroffene Produkte und Versionsbereiche.

Siemens SIMATIC HMI Classic Devices - TP/MP/OP/MP Mobile Panel (incl. SIPLUS variants): All versionsalle Versionencisa_csaf_otUS
Siemens SIMATIC HMI Comfort Outdoor Panels 7" & 15" (incl. SIPLUS variants): All versions < V15 Update 4alle Versionencisa_csaf_otUS
Siemens SIMATIC HMI Comfort Panels 4" - 22" (incl. SIPLUS variants): All versions < V15 Update 4alle Versionencisa_csaf_otUS
Siemens SIMATIC HMI KTP Mobile Panels KTP400F KTP700alle Versionencisa_csaf_otUS
Siemens SIMATIC WinCC (TIA Portal): All versions < V15 Update 4alle Versionencisa_csaf_otUS
Siemens SIMATIC WinCC Runtime Advanced: All versions < V15 Update 4alle Versionencisa_csaf_otUS
Siemens SIMATIC WinCC Runtime Professional: All versions < V15 Update 4alle Versionencisa_csaf_otUS
Siemens SIMATIC HMI Classic Devices - TP/MP/OP/MP Mobile Panel (incl. SIPLUS variants)≤ vers:all/*cisa_csaf_otUS
Siemens SIMATIC HMI Comfort Outdoor Panels 7" & 15" (incl. SIPLUS variants)< V15_Update_4cisa_csaf_otUS
Siemens SIMATIC HMI Comfort Panels 4" - 22" (incl. SIPLUS variants)< V15_Update_4cisa_csaf_otUS
Siemens SIMATIC HMI KTP Mobile Panels KTP400Falle Versionencisa_csaf_otUS
Siemens SIMATIC WinCC (TIA Portal)< V15_Update_4cisa_csaf_otUS
Siemens SIMATIC WinCC Runtime Advanced< V15_Update_4cisa_csaf_otUS
Siemens SIMATIC WinCC Runtime Professional< V15_Update_4cisa_csaf_otUS
Siemens AG SIMATIC HMI Comfort Panels 4" - 22", SIMATIC HMI Comfort Outdoor Panels 7" & 15", SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 und KTP900F, SIMATIC WinCC Runtime Advanced, SIMATIC WinCC Runtime Professional, SIMATIC WinCC (TIA Portal), SIMATIC HMI Classic Devices (TP/MP/OP/MP Mobile Panel)≤ SIMATIC HMI Classic Devices (TP/MP/OP/MP Mobile Panel) : All versionsenisa_euvdEU
Siemens AG SIMATIC HMI Comfort Panels 4" - 22", SIMATIC HMI Comfort Outdoor Panels 7" & 15", SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 und KTP900F, SIMATIC WinCC Runtime Advanced, SIMATIC WinCC Runtime Professional, SIMATIC WinCC (TIA Portal), SIMATIC HMI Classic Devices (TP/MP/OP/MP Mobile Panel)SIMATIC HMI Comfort Outdoor Panels 7" & 15" : All versions → V15 Update 4enisa_euvdEU
Siemens AG SIMATIC HMI Comfort Panels 4" - 22", SIMATIC HMI Comfort Outdoor Panels 7" & 15", SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 und KTP900F, SIMATIC WinCC Runtime Advanced, SIMATIC WinCC Runtime Professional, SIMATIC WinCC (TIA Portal), SIMATIC HMI Classic Devices (TP/MP/OP/MP Mobile Panel)SIMATIC HMI Comfort Panels 4" - 22" : All versions → V15 Update 4enisa_euvdEU
Siemens AG SIMATIC HMI Comfort Panels 4" - 22", SIMATIC HMI Comfort Outdoor Panels 7" & 15", SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 und KTP900F, SIMATIC WinCC Runtime Advanced, SIMATIC WinCC Runtime Professional, SIMATIC WinCC (TIA Portal), SIMATIC HMI Classic Devices (TP/MP/OP/MP Mobile Panel)SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 und KTP900F : All versions → V15 Update 4enisa_euvdEU
Siemens AG SIMATIC HMI Comfort Panels 4" - 22", SIMATIC HMI Comfort Outdoor Panels 7" & 15", SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 und KTP900F, SIMATIC WinCC Runtime Advanced, SIMATIC WinCC Runtime Professional, SIMATIC WinCC (TIA Portal), SIMATIC HMI Classic Devices (TP/MP/OP/MP Mobile Panel)SIMATIC WinCC (TIA Portal) : All versions → V15 Update 4enisa_euvdEU
Siemens AG SIMATIC HMI Comfort Panels 4" - 22", SIMATIC HMI Comfort Outdoor Panels 7" & 15", SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 und KTP900F, SIMATIC WinCC Runtime Advanced, SIMATIC WinCC Runtime Professional, SIMATIC WinCC (TIA Portal), SIMATIC HMI Classic Devices (TP/MP/OP/MP Mobile Panel)SIMATIC WinCC Runtime Advanced : All versions → V15 Update 4enisa_euvdEU

20 von 33 angezeigt

Advisories (1)

Hersteller- und Ökosystem-Meldungen dazu.

ICSA-18-317-08Siemens SIMATIC Panels2018-11-13icsa · cisa_csaf_otUS
As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.

auch bekannt als (3)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd cisa_csaf_ot NVD CVE.org MITRE

veröffentlicht 2018-12-13geändert 2026-06-17

verwandt (12,501)

Verwandte Einträge.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2026-104286US	—OT kritisch	4.57% (92nd)	KEV	2026-10-01
An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail…
CVE-2026-93616US	—OT kritisch	91.6% (100th)	KEV	2026-09-22
A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on Check Point Management Server.
CVE-2026-85706US	—OT kritisch	97.4% (100th)	KEV	2026-09-12
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 18.11.12, 19.0 before 19.0.9, 19.1 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2…
CVE-2026-66384US	—OT kritisch	0.66% (52nd)	KEV	2026-08-12
An authenticated user may write data outside the intended Docker cache path under specific remote-repository conditions.
CVE-2026-59310US	—OT kritisch	2.56% (85th)	KEV	2026-07-30
VMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access to vCenter may exploit this issue to execute arbitrary code.

+12496 weitere

Referenzen (8)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan