CVE-2018-18440

highPriorität · verfolgen · 31EPSS 0.006 · 48. PerzentilDEEUUS
grimoire priorityP2 · Scheduled
Exploitable?
—
no known exploitation
Likely / severe?
0.60% (48th) EPSS
CVSS 7.2 · high
Is it mine?
69 products
Prüfe deine Angriffsfläche
Who says so?
4 sources
cnnvd · enisa_euvd · cisa_csaf_ot · siemens_psirt

EPSS · bewertet 2026-10-27

DENX U-Boot through 2018.09-rc1 has a locally exploitable buffer overflow via a crafted kernel image because filesystem loading is mishandled.

01

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Noch kein Hersteller-Fix; eine Mitigation ist verfügbar.

  • MitigationRUGGEDCOM RMC8388 V4.Xsiemens_psirt

    Disable access to the removable media via 'bootoption.txt' file parameter 'Disableautoaccessremovable = Yes' to mitigate CVE-2019-13103. Note that this vulnerability only applies to RUGGEDCOM ROS, if the device boots from removable media.

  • MitigationRUGGEDCOM RMC8388 V5.Xsiemens_psirt

    Disable access to the removable media via 'bootoption.txt' file parameter 'Disableautoaccessremovable = Yes' to mitigate CVE-2019-13103. Note that this vulnerability only applies to RUGGEDCOM ROS, if the device boots from removable media.

  • MitigationRUGGEDCOM RMC8388NC V4.Xsiemens_psirt

    Disable access to the removable media via 'bootoption.txt' file parameter 'Disableautoaccessremovable = Yes' to mitigate CVE-2019-13103. Note that this vulnerability only applies to RUGGEDCOM ROS, if the device boots from removable media.

  • MitigationRUGGEDCOM RMC8388NC V5.Xsiemens_psirt

    Disable access to the removable media via 'bootoption.txt' file parameter 'Disableautoaccessremovable = Yes' to mitigate CVE-2019-13103. Note that this vulnerability only applies to RUGGEDCOM ROS, if the device boots from removable media.

  • MitigationRUGGEDCOM RSG2488 V4.Xsiemens_psirt

    Disable access to the removable media via 'bootoption.txt' file parameter 'Disableautoaccessremovable = Yes' to mitigate CVE-2019-13103. Note that this vulnerability only applies to RUGGEDCOM ROS, if the device boots from removable media.

  • MitigationRUGGEDCOM RSG2488 V5.Xsiemens_psirt

    Disable access to the removable media via 'bootoption.txt' file parameter 'Disableautoaccessremovable = Yes' to mitigate CVE-2019-13103. Note that this vulnerability only applies to RUGGEDCOM ROS, if the device boots from removable media.

  • MitigationRUGGEDCOM RSG2488NC V4.Xsiemens_psirt

    Disable access to the removable media via 'bootoption.txt' file parameter 'Disableautoaccessremovable = Yes' to mitigate CVE-2019-13103. Note that this vulnerability only applies to RUGGEDCOM ROS, if the device boots from removable media.

  • MitigationRUGGEDCOM RSG2488NC V5.Xsiemens_psirt

    Disable access to the removable media via 'bootoption.txt' file parameter 'Disableautoaccessremovable = Yes' to mitigate CVE-2019-13103. Note that this vulnerability only applies to RUGGEDCOM ROS, if the device boots from removable media.

  • MitigationRUGGEDCOM RSG907Rsiemens_psirt

    Disable access to the removable media via 'bootoption.txt' file parameter 'Disableautoaccessremovable = Yes' to mitigate CVE-2019-13103. Note that this vulnerability only applies to RUGGEDCOM ROS, if the device boots from removable media.

  • MitigationRUGGEDCOM RSG908Csiemens_psirt

    Disable access to the removable media via 'bootoption.txt' file parameter 'Disableautoaccessremovable = Yes' to mitigate CVE-2019-13103. Note that this vulnerability only applies to RUGGEDCOM ROS, if the device boots from removable media.

  • MitigationRUGGEDCOM RSG909Rsiemens_psirt

    Disable access to the removable media via 'bootoption.txt' file parameter 'Disableautoaccessremovable = Yes' to mitigate CVE-2019-13103. Note that this vulnerability only applies to RUGGEDCOM ROS, if the device boots from removable media.

  • MitigationRUGGEDCOM RSG910Csiemens_psirt

    Disable access to the removable media via 'bootoption.txt' file parameter 'Disableautoaccessremovable = Yes' to mitigate CVE-2019-13103. Note that this vulnerability only applies to RUGGEDCOM ROS, if the device boots from removable media.

  • MitigationRUGGEDCOM RSG920P V4.Xsiemens_psirt

    Disable access to the removable media via 'bootoption.txt' file parameter 'Disableautoaccessremovable = Yes' to mitigate CVE-2019-13103. Note that this vulnerability only applies to RUGGEDCOM ROS, if the device boots from removable media.

  • MitigationRUGGEDCOM RSG920P V5.Xsiemens_psirt

    Disable access to the removable media via 'bootoption.txt' file parameter 'Disableautoaccessremovable = Yes' to mitigate CVE-2019-13103. Note that this vulnerability only applies to RUGGEDCOM ROS, if the device boots from removable media.

  • MitigationRUGGEDCOM RSG920PNC V4.Xsiemens_psirt

    Disable access to the removable media via 'bootoption.txt' file parameter 'Disableautoaccessremovable = Yes' to mitigate CVE-2019-13103. Note that this vulnerability only applies to RUGGEDCOM ROS, if the device boots from removable media.

  • MitigationRUGGEDCOM RSG920PNC V5.Xsiemens_psirt

    Disable access to the removable media via 'bootoption.txt' file parameter 'Disableautoaccessremovable = Yes' to mitigate CVE-2019-13103. Note that this vulnerability only applies to RUGGEDCOM ROS, if the device boots from removable media.

  • MitigationRUGGEDCOM RSL910siemens_psirt

    Disable access to the removable media via 'bootoption.txt' file parameter 'Disableautoaccessremovable = Yes' to mitigate CVE-2019-13103. Note that this vulnerability only applies to RUGGEDCOM ROS, if the device boots from removable media.

  • MitigationRUGGEDCOM RSL910NCsiemens_psirt

    Disable access to the removable media via 'bootoption.txt' file parameter 'Disableautoaccessremovable = Yes' to mitigate CVE-2019-13103. Note that this vulnerability only applies to RUGGEDCOM ROS, if the device boots from removable media.

  • MitigationRUGGEDCOM RST2228siemens_psirt

    Disable access to the removable media via 'bootoption.txt' file parameter 'Disableautoaccessremovable = Yes' to mitigate CVE-2019-13103. Note that this vulnerability only applies to RUGGEDCOM ROS, if the device boots from removable media.

  • MitigationRUGGEDCOM RST2228Psiemens_psirt

    Disable access to the removable media via 'bootoption.txt' file parameter 'Disableautoaccessremovable = Yes' to mitigate CVE-2019-13103. Note that this vulnerability only applies to RUGGEDCOM ROS, if the device boots from removable media.

  • MitigationRUGGEDCOM RST916Csiemens_psirt

    Disable access to the removable media via 'bootoption.txt' file parameter 'Disableautoaccessremovable = Yes' to mitigate CVE-2019-13103. Note that this vulnerability only applies to RUGGEDCOM ROS, if the device boots from removable media.

  • MitigationRUGGEDCOM RST916Psiemens_psirt

    Disable access to the removable media via 'bootoption.txt' file parameter 'Disableautoaccessremovable = Yes' to mitigate CVE-2019-13103. Note that this vulnerability only applies to RUGGEDCOM ROS, if the device boots from removable media.

  • MitigationRUGGEDCOM RMC8388 V4.Xcisa_csaf_ot

    Disable access to the removable media via 'bootoption.txt' file parameter 'Disableautoaccessremovable = Yes' to mitigate CVE-2019-13103. Note that this vulnerability only applies to RUGGEDCOM ROS, if the device boots from removable media.

  • MitigationRUGGEDCOM RMC8388 V5.Xcisa_csaf_ot

    Disable access to the removable media via 'bootoption.txt' file parameter 'Disableautoaccessremovable = Yes' to mitigate CVE-2019-13103. Note that this vulnerability only applies to RUGGEDCOM ROS, if the device boots from removable media.

  • MitigationRUGGEDCOM RMC8388NC V4.Xcisa_csaf_ot

    Disable access to the removable media via 'bootoption.txt' file parameter 'Disableautoaccessremovable = Yes' to mitigate CVE-2019-13103. Note that this vulnerability only applies to RUGGEDCOM ROS, if the device boots from removable media.

  • MitigationRUGGEDCOM RMC8388NC V5.Xcisa_csaf_ot

    Disable access to the removable media via 'bootoption.txt' file parameter 'Disableautoaccessremovable = Yes' to mitigate CVE-2019-13103. Note that this vulnerability only applies to RUGGEDCOM ROS, if the device boots from removable media.

  • MitigationRUGGEDCOM RSG2488 V4.Xcisa_csaf_ot

    Disable access to the removable media via 'bootoption.txt' file parameter 'Disableautoaccessremovable = Yes' to mitigate CVE-2019-13103. Note that this vulnerability only applies to RUGGEDCOM ROS, if the device boots from removable media.

  • MitigationRUGGEDCOM RSG2488 V5.Xcisa_csaf_ot

    Disable access to the removable media via 'bootoption.txt' file parameter 'Disableautoaccessremovable = Yes' to mitigate CVE-2019-13103. Note that this vulnerability only applies to RUGGEDCOM ROS, if the device boots from removable media.

  • MitigationRUGGEDCOM RSG2488NC V4.Xcisa_csaf_ot

    Disable access to the removable media via 'bootoption.txt' file parameter 'Disableautoaccessremovable = Yes' to mitigate CVE-2019-13103. Note that this vulnerability only applies to RUGGEDCOM ROS, if the device boots from removable media.

  • MitigationRUGGEDCOM RSG2488NC V5.Xcisa_csaf_ot

    Disable access to the removable media via 'bootoption.txt' file parameter 'Disableautoaccessremovable = Yes' to mitigate CVE-2019-13103. Note that this vulnerability only applies to RUGGEDCOM ROS, if the device boots from removable media.

  • MitigationRUGGEDCOM RSG907Rcisa_csaf_ot

    Disable access to the removable media via 'bootoption.txt' file parameter 'Disableautoaccessremovable = Yes' to mitigate CVE-2019-13103. Note that this vulnerability only applies to RUGGEDCOM ROS, if the device boots from removable media.

  • MitigationRUGGEDCOM RSG908Ccisa_csaf_ot

    Disable access to the removable media via 'bootoption.txt' file parameter 'Disableautoaccessremovable = Yes' to mitigate CVE-2019-13103. Note that this vulnerability only applies to RUGGEDCOM ROS, if the device boots from removable media.

  • MitigationRUGGEDCOM RSG909Rcisa_csaf_ot

    Disable access to the removable media via 'bootoption.txt' file parameter 'Disableautoaccessremovable = Yes' to mitigate CVE-2019-13103. Note that this vulnerability only applies to RUGGEDCOM ROS, if the device boots from removable media.

  • MitigationRUGGEDCOM RSG910Ccisa_csaf_ot

    Disable access to the removable media via 'bootoption.txt' file parameter 'Disableautoaccessremovable = Yes' to mitigate CVE-2019-13103. Note that this vulnerability only applies to RUGGEDCOM ROS, if the device boots from removable media.

  • MitigationRUGGEDCOM RSG920P V4.Xcisa_csaf_ot

    Disable access to the removable media via 'bootoption.txt' file parameter 'Disableautoaccessremovable = Yes' to mitigate CVE-2019-13103. Note that this vulnerability only applies to RUGGEDCOM ROS, if the device boots from removable media.

  • MitigationRUGGEDCOM RSG920P V5.Xcisa_csaf_ot

    Disable access to the removable media via 'bootoption.txt' file parameter 'Disableautoaccessremovable = Yes' to mitigate CVE-2019-13103. Note that this vulnerability only applies to RUGGEDCOM ROS, if the device boots from removable media.

  • MitigationRUGGEDCOM RSG920PNC V4.Xcisa_csaf_ot

    Disable access to the removable media via 'bootoption.txt' file parameter 'Disableautoaccessremovable = Yes' to mitigate CVE-2019-13103. Note that this vulnerability only applies to RUGGEDCOM ROS, if the device boots from removable media.

  • MitigationRUGGEDCOM RSG920PNC V5.Xcisa_csaf_ot

    Disable access to the removable media via 'bootoption.txt' file parameter 'Disableautoaccessremovable = Yes' to mitigate CVE-2019-13103. Note that this vulnerability only applies to RUGGEDCOM ROS, if the device boots from removable media.

  • MitigationRUGGEDCOM RSL910cisa_csaf_ot

    Disable access to the removable media via 'bootoption.txt' file parameter 'Disableautoaccessremovable = Yes' to mitigate CVE-2019-13103. Note that this vulnerability only applies to RUGGEDCOM ROS, if the device boots from removable media.

  • MitigationRUGGEDCOM RSL910NCcisa_csaf_ot

    Disable access to the removable media via 'bootoption.txt' file parameter 'Disableautoaccessremovable = Yes' to mitigate CVE-2019-13103. Note that this vulnerability only applies to RUGGEDCOM ROS, if the device boots from removable media.

  • MitigationRUGGEDCOM RST2228cisa_csaf_ot

    Disable access to the removable media via 'bootoption.txt' file parameter 'Disableautoaccessremovable = Yes' to mitigate CVE-2019-13103. Note that this vulnerability only applies to RUGGEDCOM ROS, if the device boots from removable media.

  • MitigationRUGGEDCOM RST2228Pcisa_csaf_ot

    Disable access to the removable media via 'bootoption.txt' file parameter 'Disableautoaccessremovable = Yes' to mitigate CVE-2019-13103. Note that this vulnerability only applies to RUGGEDCOM ROS, if the device boots from removable media.

  • MitigationRUGGEDCOM RST916Ccisa_csaf_ot

    Disable access to the removable media via 'bootoption.txt' file parameter 'Disableautoaccessremovable = Yes' to mitigate CVE-2019-13103. Note that this vulnerability only applies to RUGGEDCOM ROS, if the device boots from removable media.

  • MitigationRUGGEDCOM RST916Pcisa_csaf_ot

    Disable access to the removable media via 'bootoption.txt' file parameter 'Disableautoaccessremovable = Yes' to mitigate CVE-2019-13103. Note that this vulnerability only applies to RUGGEDCOM ROS, if the device boots from removable media.

  • Kein Fix verfügbarRUGGEDCOM RMC8388 V5.Xsiemens_psirt

    Currently no fix is available

  • Kein Fix verfügbarRUGGEDCOM RMC8388NC V4.Xsiemens_psirt

    Currently no fix is available

  • Kein Fix verfügbarRUGGEDCOM RSG2488NC V4.Xsiemens_psirt

    Currently no fix is available

  • Kein Fix verfügbarRUGGEDCOM RSG2488NC V5.Xsiemens_psirt

    Currently no fix is available

  • Kein Fix verfügbarRUGGEDCOM RSG920PNC V4.Xsiemens_psirt

    Currently no fix is available

  • Kein Fix verfügbarRUGGEDCOM RSG920PNC V5.Xsiemens_psirt

    Currently no fix is available

  • Kein Fix verfügbarRUGGEDCOM RST2228Psiemens_psirt

    Currently no fix is available

  • Kein Fix verfügbarRUGGEDCOM RMC8388 V5.Xcisa_csaf_ot

    Currently no fix is available

  • Kein Fix verfügbarRUGGEDCOM RMC8388NC V4.Xcisa_csaf_ot

    Currently no fix is available

  • Kein Fix verfügbarRUGGEDCOM RSG2488NC V4.Xcisa_csaf_ot

    Currently no fix is available

  • Kein Fix verfügbarRUGGEDCOM RSG2488NC V5.Xcisa_csaf_ot

    Currently no fix is available

  • Kein Fix verfügbarRUGGEDCOM RSG920PNC V4.Xcisa_csaf_ot

    Currently no fix is available

  • Kein Fix verfügbarRUGGEDCOM RSG920PNC V5.Xcisa_csaf_ot

    Currently no fix is available

  • Kein Fix verfügbarRUGGEDCOM RST2228Pcisa_csaf_ot

    Currently no fix is available

  • Kein Fix geplantRUGGEDCOM RMC8388 V4.Xsiemens_psirt

    Currently no fix is planned

  • Kein Fix geplantRUGGEDCOM RMC8388NC V5.Xsiemens_psirt

    Currently no fix is planned

  • Kein Fix geplantRUGGEDCOM RSG2488 V4.Xsiemens_psirt

    Currently no fix is planned

  • Kein Fix geplantRUGGEDCOM RSG2488 V5.Xsiemens_psirt

    Currently no fix is planned

  • Kein Fix geplantRUGGEDCOM RSG907Rsiemens_psirt

    Currently no fix is planned

  • Kein Fix geplantRUGGEDCOM RSG908Csiemens_psirt

    Currently no fix is planned

  • Kein Fix geplantRUGGEDCOM RSG909Rsiemens_psirt

    Currently no fix is planned

  • Kein Fix geplantRUGGEDCOM RSG910Csiemens_psirt

    Currently no fix is planned

  • Kein Fix geplantRUGGEDCOM RSG920P V4.Xsiemens_psirt

    Currently no fix is planned

  • Kein Fix geplantRUGGEDCOM RSG920P V5.Xsiemens_psirt

    Currently no fix is planned

  • Kein Fix geplantRUGGEDCOM RSL910siemens_psirt

    Currently no fix is planned

  • Kein Fix geplantRUGGEDCOM RSL910NCsiemens_psirt

    Currently no fix is planned

  • Kein Fix geplantRUGGEDCOM RST2228siemens_psirt

    Currently no fix is planned

  • Kein Fix geplantRUGGEDCOM RST916Csiemens_psirt

    Currently no fix is planned

  • Kein Fix geplantRUGGEDCOM RST916Psiemens_psirt

    Currently no fix is planned

  • Kein Fix geplantRUGGEDCOM RMC8388 V4.Xcisa_csaf_ot

    Currently no fix is planned

  • Kein Fix geplantRUGGEDCOM RMC8388NC V5.Xcisa_csaf_ot

    Currently no fix is planned

  • Kein Fix geplantRUGGEDCOM RSG2488 V4.Xcisa_csaf_ot

    Currently no fix is planned

  • Kein Fix geplantRUGGEDCOM RSG2488 V5.Xcisa_csaf_ot

    Currently no fix is planned

  • Kein Fix geplantRUGGEDCOM RSG907Rcisa_csaf_ot

    Currently no fix is planned

  • Kein Fix geplantRUGGEDCOM RSG908Ccisa_csaf_ot

    Currently no fix is planned

  • Kein Fix geplantRUGGEDCOM RSG909Rcisa_csaf_ot

    Currently no fix is planned

  • Kein Fix geplantRUGGEDCOM RSG910Ccisa_csaf_ot

    Currently no fix is planned

  • Kein Fix geplantRUGGEDCOM RSG920P V4.Xcisa_csaf_ot

    Currently no fix is planned

  • Kein Fix geplantRUGGEDCOM RSG920P V5.Xcisa_csaf_ot

    Currently no fix is planned

  • Kein Fix geplantRUGGEDCOM RSL910cisa_csaf_ot

    Currently no fix is planned

  • Kein Fix geplantRUGGEDCOM RSL910NCcisa_csaf_ot

    Currently no fix is planned

  • Kein Fix geplantRUGGEDCOM RST2228cisa_csaf_ot

    Currently no fix is planned

  • Kein Fix geplantRUGGEDCOM RST916Ccisa_csaf_ot

    Currently no fix is planned

  • Kein Fix geplantRUGGEDCOM RST916Pcisa_csaf_ot

    Currently no fix is planned

02

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

7.8
010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen

v2.07.2highAV:L/AC:L/Au:N/C:C/I:C/A:Cprimary · NVD / NIST USAusnutzbarkeit 3.9 · Auswirkung 10
v3.07.8highCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USAusnutzbarkeit 1.8 · Auswirkung 5.9
v3.07.1highCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)
v3.17.8highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:Csecondary · CISA US
v3.17.8highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:Csecondary · Siemens ProductCERT DE
03

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

04

betroffene Produkte (69)

Betroffene Produkte und Versionsbereiche.

05

Advisories (2)

Hersteller- und Ökosystem-Meldungen dazu.

  • SSA-618620SSA-618620: Vulnerabilities in Boot Loader (U-Boot) of RUGGEDCOM ROS Devices2019-12-10csaf · siemens_psirtDE

    The boot loader within RUGGEDCOM ROS contains two vulnerabilities in the loading process of the operating system kernel. The more severe of these vulnerabilities could allow an attacker with local access to the device to execute arbitrary code on an affected device. Siemens recommends specific countermeasures to mitigate this issue.

  • ICSA-19-344-03Siemens RUGGEDCOM ROS (Update A)2019-12-10icsa · cisa_csaf_otUS

    The boot loader within RUGGEDCOM ROS contains two vulnerabilities in the loading process of the operating system kernel. The more severe of these vulnerabilities could allow an attacker with local access to the device to execute arbitrary code on an affected device. Siemens recommends specific countermeasures to mitigate this issue.

06

auch bekannt als (3)

Weitere Namen und Kennungen dieser Entität.

07

quellen

Welche Quellen diesen Datensatz belegen und wann.

veröffentlicht 2018-11-20geändert 2026-06-17
09

Referenzen (10)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan