CVE-2018-4832 is a Denial-of-Service vulnerability affecting numerous Siemens industrial control system products, including various versions of OpenPCS 7, SIMATIC BATCH, SIMATIC NET PC Software, SIMATIC PCS 7, SIMATIC Route Control, SIMATIC WinCC, and SPPA-T3000 Application Server. An unauthenticated attacker with network access can send specially crafted messages to the RPC service, causing the affected system's remote and local communication functionality to cease, requiring a system reboot for recovery. Rated with a CVSS v3.1 score of 7.5 (HIGH), this vulnerability has a low attack complexity and requires no user interaction or privileges, making it easily exploitable over the network. The primary impact is a complete loss of availability for the affected communication services. As of the advisory publication, there was no known public exploitation of this vulnerability. There is no exploit code available in Metasploit, Nuclei, or ExploitDB, and it has received minimal community discussion or media coverage, indicating a low level of public awareness and active exploitation.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 7.1CPE matchmatch criteria | cpe:2.3:a:siemens:openpcs_7:*:*:*:*:*:*:*:* | ||
8.0CPE matchmatch criteria | cpe:2.3:a:siemens:openpcs_7:8.0:*:*:*:*:*:*:* | ||
8.1CPE matchmatch criteria | cpe:2.3:a:siemens:openpcs_7:8.1:-:*:*:*:*:*:* | ||
8.1CPE matchmatch criteria | cpe:2.3:a:siemens:openpcs_7:8.1:upd_1:*:*:*:*:*:* | ||
8.1CPE matchmatch criteria | cpe:2.3:a:siemens:openpcs_7:8.1:upd_2:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.