CVE-2018-4850 is a Denial-of-Service (DoS) vulnerability affecting Siemens SIMATIC S7-400 and S7-400H CPUs, specifically hardware versions 4.0 and below, and firmware versions below 5.2 for hardware version 5.0. This flaw stems from improper validation of S7 communication packets, allowing an unauthenticated attacker to remotely trigger a DoS condition by sending specially crafted packets. The vulnerability has a CVSSv3 score of 7.5 (High), indicating a network-exploitable, low-complexity attack that results in a complete loss of availability, requiring a manual restart of the affected CPU. There is no evidence of active exploitation, and no public exploit code is available in Metasploit, Nuclei, or ExploitDB, though it has received some community discussion and media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 4.0CPE matchmatch criteria | cpe:2.3:o:siemens:simatic_s7-400_firmware:*:*:*:*:*:*:*:* | ||
< 5.2CPE matchmatch criteria | cpe:2.3:o:siemens:simatic_s7-400_firmware:*:*:*:*:*:*:*:* | ||
<= 4.5CPE matchmatch criteria | cpe:2.3:o:siemens:simatic_s7-400h_firmware:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.