CVE-2018-16602

mediumpriority · track · 25EPSS 0.018 · 79 %ileDEEUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

1.84% (79th) EPSS

CVSS 4.3 · medium

Is it mine?

17 products

Check your exposure

Who says so?

4 sources

cnnvd · enisa_euvd · nvd · sick_psirt

EPSS · scored 2026-10-27

An issue was discovered in Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component. Out of bounds memory access during parsing of DHCP responses in prvProcessDHCPReplies can be used for information disclosure.

cvss

Technical severity, 0–10. One row per scoring source.

5.9

010

base score 0–10 · higher = more severe · hover a vector to decode

v2.04.3mediumAV:N/AC:M/Au:N/C:P/I:N/A:Nprimary · NVD / NIST USexploitability 8.6 · impact 2.9

v3.05.9mediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:Nprimary · NVD / NIST USexploitability 2.2 · impact 3.6

v3.05.4mediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:Usecondary · CVSS-BT (t0sche)

v3.15.9mediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:Nsecondary · SICK PSIRT DE

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-200USprimaryCWE-200US

affected products (17)

Products and version ranges known to be affected.

n/a n/a≤ n/aenisa_euvdEU
amazon amazon web services freertos≤ 1.3.1nvdUScpe:2.3:a:amazon:amazon_web_services_freertos:*:*:*:*:*:*:*:*
amazon freertos≤ 10.0.1nvdUScpe:2.3:a:amazon:freertos:*:*:*:*:*:*:*:*
SICK ANM58B all Firmware versionsall versionsnot affectedsick_psirtDE
SICK ANS58B all Firmware versionsall versionsnot affectedsick_psirtDE
SICK DCM4 with Firmware 1.2.0 up to 1.4.0all versionsnot affectedsick_psirtDE
SICK DMM4 with Firmware 1.2.0 up to 1.4.0all versionsnot affectedsick_psirtDE
SICK FXL1 with Firmware 1.6.0 up to 1.21.0all versionsnot affectedsick_psirtDE
SICK SE1 with Firmware 1.16.0 up to 1.17.0all versionsnot affectedsick_psirtDE
SICK deTec4 with Firmware 1.05 up to 1.51.0all versionsnot affectedsick_psirtDE
SICK deTem2 Core A/P with Firmware 1.04 up to 1.10all versionsnot affectedsick_psirtDE
SICK deTem4 A/P with Firmware 1.02 up to 1.32.0all versionsnot affectedsick_psirtDE
SICK deTem4 Core A/P with Firmware 1.04 up to 1.10all versionsnot affectedsick_psirtDE
SICK deTem4 LT Muting A/P with Firmware 1.10all versionsnot affectedsick_psirtDE
SICK deTem4 with Firmware 1.02 up to 1.3.0all versionsnot affectedsick_psirtDE
SICK safeVisionary2 all Firmware versionsall versionsnot affectedsick_psirtDE
SICK scanGrid2 with Firmware 1.10 up to 1.15all versionsnot affectedsick_psirtDE

advisories (1)

Vendor and ecosystem advisories describing this.

SCA-2025-0003FreeRTOS Vulnerabilities have no impact on SICK Products2025-02-28csaf · sick_psirtDE
FreeRTOS has several known vulnerabilities and is used in various SICK products. A current analysis confirms that the identified vulnerabilities in FreeRTOS do not affect the mentioned SICK products. At this time, there is no indication of any potential risks to these SICK products.

also known as (3)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd nvd sick_psirt NVD CVE.org MITRE

published 2018-12-06modified 2026-06-17

related (19,407)

Related entries.

ID	severity	EPSS	exploitable	published
CVE-2026-20133US	high7.5OT critical	31.5% (98th)	KEV	2026-02-25
A vulnerability in Cisco Catalyst SD-WAN Software could allow an unauthenticated, remote attacker to view sensitive information on an affected system. This vulnerability is due…
CVE-2026-20128US	—OT critical	7.32% (94th)	KEV	2026-02-25
A vulnerability in the Data Collection Agent (DCA) feature of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to gain DCA user privileges on an affect…
CVE-2026-20122US	medium5.4OT critical	25.8% (98th)	KEV	2026-02-25
A vulnerability in the API of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to overwrite arbitrary files on the local file system. To exploit this vul…
CVE-2025-68686US	—OT critical	29.5% (98th)	KEV	2026-02-10
An Exposure of Sensitive Information to an Unauthorized Actor vulnerability [CWE-200] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.1, FortiOS 7.4.0 through 7.4.6, FortiOS 7.…
CVE-2026-20805US	—OT critical	7.46% (94th)	KEV	2026-01-13
Exposure of sensitive information to an unauthorized actor in Desktop Windows Manager allows an authorized attacker to disclose information locally.

+19402 more

references (9)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan