CVE-2018-4833

mediumPriorität · verfolgen · 35EPSS 0.010 · 61. PerzentilEURUUS
grimoire priorityP3 · Track
Exploitable?
—
no known exploitation
Likely / severe?
0.95% (61st) EPSS
CVSS 5.8 · medium
Is it mine?
49 products
Prüfe deine Angriffsfläche
Who says so?
4 sources
cnnvd · enisa_euvd · fstec_bdu · cisa_csaf_ot

EPSS · bewertet 2026-10-27

A vulnerability has been identified in RFID 181EIP (All versions), RUGGEDCOM Win (V4.4, V4.5, V5.0, and V5.1), SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.3), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.4.1), SCALANCE X-200RNA switch family (All versions < V3.2.6), SCALANCE X-300 switch family (incl. SIPLUS NET variants) (All versions < V4.1.3), SCALANCE X408 (All versions < V4.1.3), SCALANCE X414 (All versions), SIMATIC RF182C (All versions). Unprivileged remote attackers located in the same local network segment (OSI Layer 2) could gain remote code execution on the affected products by sending a specially crafted DHCP response to a client's DHCP request.

01

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

  • BehobenRUGGEDCOM Wincisa_csaf_ot

    Update to V5.2 https://support.industry.siemens.com/cs/ww/en/view/109762466

  • BehobenSCALANCE X-200 switch family (incl.'SIPLUS NET variants)cisa_csaf_ot

    Update to V5.2.3 https://support.industry.siemens.com/cs/ww/en/view/109758142

  • BehobenSCALANCE X-200IRT switch family (incl.'SIPLUS NET variants)cisa_csaf_ot

    Update to V5.4.1 https://support.industry.siemens.com/cs/ww/en/view/109758144

  • BehobenSCALANCE X-200RNA switch familycisa_csaf_ot

    Update to V3.2.6 https://support.industry.siemens.com/cs/ww/en/view/109767359

  • BehobenSCALANCE X-300 switch family (incl.'SIPLUS NET variants)cisa_csaf_ot

    Update to V4.1.3 https://support.industry.siemens.com/cs/document/109773547

  • BehobenSCALANCE X408cisa_csaf_ot

    Update to V4.1.3 https://support.industry.siemens.com/cs/document/109773547

  • MitigationRFID 181EIPcisa_csaf_ot

    Apply Defense-in-Depth: https://www.siemens.com/cert/operational-guidelines-industrial-security

  • MitigationRUGGEDCOM Wincisa_csaf_ot

    Apply Defense-in-Depth: https://www.siemens.com/cert/operational-guidelines-industrial-security

  • MitigationSCALANCE X-200 switch family (incl.'SIPLUS NET variants)cisa_csaf_ot

    Apply Defense-in-Depth: https://www.siemens.com/cert/operational-guidelines-industrial-security

  • MitigationSCALANCE X-200IRT switch family (incl.'SIPLUS NET variants)cisa_csaf_ot

    Apply Defense-in-Depth: https://www.siemens.com/cert/operational-guidelines-industrial-security

  • MitigationSCALANCE X-200RNA switch familycisa_csaf_ot

    Apply Defense-in-Depth: https://www.siemens.com/cert/operational-guidelines-industrial-security

  • MitigationSCALANCE X-300 switch family (incl.'SIPLUS NET variants)cisa_csaf_ot

    Apply Defense-in-Depth: https://www.siemens.com/cert/operational-guidelines-industrial-security

  • MitigationSCALANCE X408cisa_csaf_ot

    Apply Defense-in-Depth: https://www.siemens.com/cert/operational-guidelines-industrial-security

  • MitigationSCALANCE X414cisa_csaf_ot

    Apply Defense-in-Depth: https://www.siemens.com/cert/operational-guidelines-industrial-security

  • MitigationSIMATIC RF182Ccisa_csaf_ot

    Apply Defense-in-Depth: https://www.siemens.com/cert/operational-guidelines-industrial-security

02

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

8.8
010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 5.8–8.8

v2.05.8mediumAV:A/AC:L/Au:N/C:P/I:P/A:Pprimary · NVD / NIST USAusnutzbarkeit 6.5 · Auswirkung 6.4
v3.08.8highCVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USAusnutzbarkeit 2.8 · Auswirkung 5.9
v3.08.1highCVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)
v3.17.5highCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:T/RC:Csecondary · CISA US
v3.17.5highAV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU
03

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-122USCWE-122USCWE-20USCWE-264US
04

betroffene Produkte (49)

Betroffene Produkte und Versionsbereiche.

20 von 49 angezeigt
05

Advisories (1)

Hersteller- und Ökosystem-Meldungen dazu.

  • ICSA-18-165-01Siemens SCALANCE X Switches, RUGGEDCOM WiMAX, RFID 181-EIP, and SIMATIC RF182C (Update D)2018-06-12icsa · cisa_csaf_otUS

    As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.

06

auch bekannt als (4)

Weitere Namen und Kennungen dieser Entität.

07

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvdenisa_euvdfstec_bducisa_csaf_otNVDCVE.orgMITRE
veröffentlicht 2018-06-14geändert 2026-06-17
08

Referenzen (6)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan