CVE-2018-11454

mediumpriority · track · 34OT risk · elevatedEPSS 0.004 · 38 %ileEUUS
grimoire priorityP3 · Track
Exploitable?
—
no known exploitation
Likely / severe?
0.44% (38th) EPSS
CVSS 4.4 · medium
Is it mine?
24 products
Check your exposure
Who says so?
4 sources
cnnvd · enisa_euvd · cisa_csaf_ot · nvd

EPSS · scored 2026-10-28

A vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V10, V11, V12 (All versions), SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V13 (All versions < V13 SP2 Update 2), SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V14 (All versions < V14 SP1 Update 6), SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V15 (All versions < V15 Update 2). Improper file permissions in the default installation of TIA Portal may allow an attacker with local file system access to manipulate resources which may be transferred to devices and executed there by a different user. No special privileges are required, but the victim needs to transfer the manipulated files to a device. Execution is caused on the target device rather than on the PG device.

01

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

  • FixedSIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V10, V11, V12cisa_csaf_ot

    Upgrade to V13 SP2 Update 2 - Download: https://support.industry.siemens.com/cs/ww/en/view/109759753

    https://support.industry.siemens.com/cs/ww/en/view/109759753
  • FixedSIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V13cisa_csaf_ot

    Update to V13 SP2 Update 2 - Download: https://support.industry.siemens.com/cs/ww/en/view/109759753

    https://support.industry.siemens.com/cs/ww/en/view/109759753
  • FixedSIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V14cisa_csaf_ot

    Update to V14 SP1 Update 6 - Download: https://support.industry.siemens.com/cs/ww/en/view/109747387

    https://support.industry.siemens.com/cs/ww/en/view/109747387
  • FixedSIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V15cisa_csaf_ot

    Update to V15 Update 2 or newer - Download: https://support.industry.siemens.com/cs/ww/en/view/109755826

    https://support.industry.siemens.com/cs/ww/en/view/109755826
  • MitigationSIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V10, V11, V12cisa_csaf_ot

    Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:trusted sources. Restrict operating system access to authorized personnel.

  • MitigationSIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V13cisa_csaf_ot

    Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:trusted sources. Restrict operating system access to authorized personnel.

  • MitigationSIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V14cisa_csaf_ot

    Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:trusted sources. Restrict operating system access to authorized personnel.

  • MitigationSIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V15cisa_csaf_ot

    Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:trusted sources. Restrict operating system access to authorized personnel.

02

cvss

Technical severity, 0–10. One row per scoring source.

8.6
010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 4.4–8.6

v2.04.4mediumAV:L/AC:M/Au:N/C:P/I:P/A:Pprimary · NVD / NIST USexploitability 3.4 · impact 6.4
v3.08.6highCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:Hprimary · NVD / NIST USexploitability 1.8 · impact 6
v3.08.6highCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:P/RL:O/RC:Csecondary · CISA US
v3.07.9highCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)
03

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-732USprimaryCWE-276USCWE-276US
04

affected products (24)

Products and version ranges known to be affected.

showing 20 of 24
05

advisories (1)

Vendor and ecosystem advisories describing this.

  • ICSA-18-226-01ICSA-18-226-01 Siemens SIMATIC STEP 7 and SIMATIC WinCC (Update A)2018-08-07icsa · cisa_csaf_otUS

    CISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.

06

also known as (3)

Other names and identifiers for this entity.

07

sources

Which sources assert this record, and when.

cnnvdenisa_euvdcisa_csaf_otnvdNVDCVE.orgMITRE
published 2018-08-07modified 2026-06-17
09

references (6)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan