CVE-2018-13804 is an authentication bypass vulnerability affecting various versions of Siemens SIMATIC IT LMS, Production Suite, and UA Discrete Manufacturing. An attacker with network access and a valid username can bypass application-level authentication without requiring user privileges or interaction. This high-severity vulnerability (CVSS 8.1) could lead to a complete compromise of confidentiality, integrity, and availability. Currently, there is no known public exploitation, no available exploit code in common repositories, and minimal community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
All Versions ImpactedCPE matchmatch criteria | cpe:2.3:a:siemens:simatic_it_line_monitoring_system:*:*:*:*:*:*:*:* | ||
v7.1CPE matchmatch criteria | cpe:2.3:a:siemens:simatic_it_production_suite:v7.1:*:*:*:*:*:*:* | ||
<= v1.2CPE matchmatch criteria | cpe:2.3:a:siemens:simatic_it_ua_discrete_manufacturing:*:*:*:*:*:*:*:* | ||
v1.3CPE matchmatch criteria | cpe:2.3:a:siemens:simatic_it_ua_discrete_manufacturing:v1.3:*:*:*:*:*:*:* | ||
v2.3CPE matchmatch criteria | cpe:2.3:a:siemens:simatic_it_ua_discrete_manufacturing:v2.3:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.