var-201904-0656
Vulnerability from variot
A vulnerability has been identified in SIMATIC S7-1500 CPU (All versions >= V2.0 and < V2.5), SIMATIC S7-1500 CPU (All versions <= V1.8.5). Specially crafted network packets sent to port 80/tcp or 443/tcp could allow an unauthenticated remote attacker to cause a Denial-of-Service condition of the device. The security vulnerability could be exploited by an attacker with network access to the affected systems on port 80/tcp or 443/tcp. Successful exploitation requires no system privileges and no user interaction. An attacker could use the vulnerability to compromise availability of the device. At the time of advisory publication no public exploitation of this security vulnerability was known. SIMATIC S7-1500 CPU Contains an input validation vulnerability.Service operation interruption (DoS) There is a possibility of being put into a state. The Siemens SIMATIC S7-1500 is a family of modular controllers. A denial of service vulnerability exists in the Siemens SIMATIC S7-1500 CPU. Attackers can exploit these issues to crash the affected application or consume excess memory, denying service to legitimate users
Show details on source website{ "@context": { "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#", "affected_products": { "@id": "https://www.variotdbs.pl/ref/affected_products" }, "configurations": { "@id": "https://www.variotdbs.pl/ref/configurations" }, "credits": { "@id": "https://www.variotdbs.pl/ref/credits" }, "cvss": { "@id": "https://www.variotdbs.pl/ref/cvss/" }, "description": { "@id": "https://www.variotdbs.pl/ref/description/" }, "exploit_availability": { "@id": "https://www.variotdbs.pl/ref/exploit_availability/" }, "external_ids": { "@id": "https://www.variotdbs.pl/ref/external_ids/" }, "iot": { "@id": "https://www.variotdbs.pl/ref/iot/" }, "iot_taxonomy": { "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/" }, "patch": { "@id": "https://www.variotdbs.pl/ref/patch/" }, "problemtype_data": { "@id": "https://www.variotdbs.pl/ref/problemtype_data/" }, "references": { "@id": "https://www.variotdbs.pl/ref/references/" }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources/" }, "sources_release_date": { "@id": "https://www.variotdbs.pl/ref/sources_release_date/" }, "sources_update_date": { "@id": "https://www.variotdbs.pl/ref/sources_update_date/" }, "threat_type": { "@id": "https://www.variotdbs.pl/ref/threat_type/" }, "title": { "@id": "https://www.variotdbs.pl/ref/title/" }, "type": { "@id": "https://www.variotdbs.pl/ref/type/" } }, "@id": "https://www.variotdbs.pl/vuln/VAR-201904-0656", "affected_products": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/affected_products#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" }, "@id": "https://www.variotdbs.pl/ref/sources" } }, "data": [ { "model": "simatic s7-1500", "scope": "lt", "trust": 1.0, "vendor": "siemens", "version": "2.5" }, { "model": "simatic s7-1500", "scope": "gte", "trust": 1.0, "vendor": "siemens", "version": "2.0" }, { "model": "simatic s7-1500", "scope": "lte", "trust": 1.0, "vendor": "siemens", "version": "1.8.5" }, { "model": "simatic s7-1500", "scope": "lte", "trust": 0.8, "vendor": "siemens", "version": "1.85" }, { "model": "simatic s7-1500", "scope": "lt", "trust": 0.8, "vendor": "siemens", "version": "2.0 thats all 2.5" }, { "model": "simatic s7-1500 cpu", "scope": "gte", "trust": 0.6, "vendor": "siemens", "version": "v2.0\u003cv2.5" }, { "model": "simatic s7-1500 cpu", "scope": "lte", "trust": 0.6, "vendor": "siemens", "version": "\u003c=v1.8.5" }, { "model": null, "scope": "eq", "trust": 0.4, "vendor": "simatic s7 1500", "version": "*" }, { "model": "simatic s7-1500", "scope": "eq", "trust": 0.3, "vendor": "siemens", "version": "1.8.5" }, { "model": "simatic s7-1500", "scope": "eq", "trust": 0.3, "vendor": "siemens", "version": "1.8.3" }, { "model": "simatic s7-1500", "scope": "eq", "trust": 0.3, "vendor": "siemens", "version": "1.7" }, { "model": "simatic s7-1500", "scope": "eq", "trust": 0.3, "vendor": "siemens", "version": "2.0" }, { "model": "simatic s7-1500", "scope": "eq", "trust": 0.3, "vendor": "siemens", "version": "1.6" }, { "model": "simatic s7-1500", "scope": "eq", "trust": 0.3, "vendor": "siemens", "version": "1.5.0" }, { "model": "simatic s7-1500", "scope": "ne", "trust": 0.3, "vendor": "siemens", "version": "2.5" } ], "sources": [ { "db": "IVD", "id": "7d8430d0-463f-11e9-a56d-000c29342cb1" }, { "db": "CNVD", "id": "CNVD-2019-00984" }, { "db": "BID", "id": "106788" }, { "db": "JVNDB", "id": "JVNDB-2018-015271" }, { "db": "NVD", "id": "CVE-2018-16558" } ] }, "configurations": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/configurations#", "children": { "@container": "@list" }, "cpe_match": { "@container": "@list" }, "data": { "@container": "@list" }, "nodes": { "@container": "@list" } }, "data": [ { "CVE_data_version": "4.0", "nodes": [ { "children": [ { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:o:siemens:simatic_s7-1500_firmware:*:*:*:*:*:*:*:*", "cpe_name": [], "versionEndExcluding": "2.5", "versionStartIncluding": "2.0", "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:siemens:simatic_s7-1500_firmware:*:*:*:*:*:*:*:*", "cpe_name": [], "versionEndIncluding": "1.8.5", "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:h:siemens:simatic_s7-1500:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false } ], "operator": "OR" } ], "cpe_match": [], "operator": "AND" } ] } ], "sources": [ { "db": "NVD", "id": "CVE-2018-16558" } ] }, "credits": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/credits#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "Ilya Karpov, Druzhinin Evgeny,Georgy Zaytsev, Dmitry Sklyarov, and Maxim Goryachy from PositiveTechnologies", "sources": [ { "db": "CNNVD", "id": "CNNVD-201901-307" } ], "trust": 0.6 }, "cve": "CVE-2018-16558", "cvss": { "@context": { "cvssV2": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#" }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2" }, "cvssV3": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#" }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/" }, "severity": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/cvss/severity#" }, "@id": "https://www.variotdbs.pl/ref/cvss/severity" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" }, "@id": "https://www.variotdbs.pl/ref/sources" } }, "data": [ { "cvssV2": [ { "acInsufInfo": false, "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "author": "NVD", "availabilityImpact": "COMPLETE", "baseScore": 7.8, "confidentialityImpact": "NONE", "exploitabilityScore": 10.0, "impactScore": 6.9, "integrityImpact": "NONE", "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "HIGH", "trust": 1.0, "userInteractionRequired": false, "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C", "version": "2.0" }, { "acInsufInfo": null, "accessComplexity": "Low", "accessVector": "Network", "authentication": "None", "author": "NVD", "availabilityImpact": "Complete", "baseScore": 7.8, "confidentialityImpact": "None", "exploitabilityScore": null, "id": "CVE-2018-16558", "impactScore": null, "integrityImpact": "None", "obtainAllPrivilege": null, "obtainOtherPrivilege": null, "obtainUserPrivilege": null, "severity": "High", "trust": 0.8, "userInteractionRequired": null, "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C", "version": "2.0" }, { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "author": "CNVD", "availabilityImpact": "COMPLETE", "baseScore": 7.8, "confidentialityImpact": "NONE", "exploitabilityScore": 10.0, "id": "CNVD-2019-00984", "impactScore": 6.9, "integrityImpact": "NONE", "severity": "HIGH", "trust": 0.6, "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C", "version": "2.0" }, { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "author": "IVD", "availabilityImpact": "COMPLETE", "baseScore": 7.8, "confidentialityImpact": "NONE", "exploitabilityScore": 10.0, "id": "7d8430d0-463f-11e9-a56d-000c29342cb1", "impactScore": 6.9, "integrityImpact": "NONE", "severity": "HIGH", "trust": 0.2, "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C", "version": "2.9 [IVD]" }, { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "author": "VULHUB", "availabilityImpact": "COMPLETE", "baseScore": 7.8, "confidentialityImpact": "NONE", "exploitabilityScore": 10.0, "id": "VHN-126929", "impactScore": 6.9, "integrityImpact": "NONE", "severity": "HIGH", "trust": 0.1, "vectorString": "AV:N/AC:L/AU:N/C:N/I:N/A:C", "version": "2.0" } ], "cvssV3": [ { "attackComplexity": "LOW", "attackVector": "NETWORK", "author": "NVD", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "exploitabilityScore": 3.9, "impactScore": 3.6, "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "trust": 1.0, "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, { "attackComplexity": "Low", "attackVector": "Network", "author": "NVD", "availabilityImpact": "High", "baseScore": 7.5, "baseSeverity": "High", "confidentialityImpact": "None", "exploitabilityScore": null, "id": "CVE-2018-16558", "impactScore": null, "integrityImpact": "None", "privilegesRequired": "None", "scope": "Unchanged", "trust": 0.8, "userInteraction": "None", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" } ], "severity": [ { "author": "NVD", "id": "CVE-2018-16558", "trust": 1.8, "value": "HIGH" }, { "author": "CNVD", "id": "CNVD-2019-00984", "trust": 0.6, "value": "HIGH" }, { "author": "CNNVD", "id": "CNNVD-201901-307", "trust": 0.6, "value": "HIGH" }, { "author": "IVD", "id": "7d8430d0-463f-11e9-a56d-000c29342cb1", "trust": 0.2, "value": "HIGH" }, { "author": "VULHUB", "id": "VHN-126929", "trust": 0.1, "value": "HIGH" } ] } ], "sources": [ { "db": "IVD", "id": "7d8430d0-463f-11e9-a56d-000c29342cb1" }, { "db": "CNVD", "id": "CNVD-2019-00984" }, { "db": "VULHUB", "id": "VHN-126929" }, { "db": "JVNDB", "id": "JVNDB-2018-015271" }, { "db": "NVD", "id": "CVE-2018-16558" }, { "db": "CNNVD", "id": "CNNVD-201901-307" } ] }, "description": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/description#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "A vulnerability has been identified in SIMATIC S7-1500 CPU (All versions \u003e= V2.0 and \u003c V2.5), SIMATIC S7-1500 CPU (All versions \u003c= V1.8.5). Specially crafted network packets sent to port 80/tcp or 443/tcp could allow an unauthenticated remote attacker to cause a Denial-of-Service condition of the device. The security vulnerability could be exploited by an attacker with network access to the affected systems on port 80/tcp or 443/tcp. Successful exploitation requires no system privileges and no user interaction. An attacker could use the vulnerability to compromise availability of the device. At the time of advisory publication no public exploitation of this security vulnerability was known. SIMATIC S7-1500 CPU Contains an input validation vulnerability.Service operation interruption (DoS) There is a possibility of being put into a state. The Siemens SIMATIC S7-1500 is a family of modular controllers. A denial of service vulnerability exists in the Siemens SIMATIC S7-1500 CPU. \nAttackers can exploit these issues to crash the affected application or consume excess memory, denying service to legitimate users", "sources": [ { "db": "NVD", "id": "CVE-2018-16558" }, { "db": "JVNDB", "id": "JVNDB-2018-015271" }, { "db": "CNVD", "id": "CNVD-2019-00984" }, { "db": "BID", "id": "106788" }, { "db": "IVD", "id": "7d8430d0-463f-11e9-a56d-000c29342cb1" }, { "db": "VULHUB", "id": "VHN-126929" } ], "trust": 2.7 }, "external_ids": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/external_ids#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "db": "NVD", "id": "CVE-2018-16558", "trust": 3.6 }, { "db": "SIEMENS", "id": "SSA-180635", "trust": 2.6 }, { "db": "CNNVD", "id": "CNNVD-201901-307", "trust": 0.9 }, { "db": "BID", "id": "106788", "trust": 0.9 }, { "db": "CNVD", "id": "CNVD-2019-00984", "trust": 0.8 }, { "db": "ICS CERT", "id": "ICSA-19-036-04", "trust": 0.8 }, { "db": "JVNDB", "id": "JVNDB-2018-015271", "trust": 0.8 }, { "db": "IVD", "id": "7D8430D0-463F-11E9-A56D-000C29342CB1", "trust": 0.2 }, { "db": "VULHUB", "id": "VHN-126929", "trust": 0.1 } ], "sources": [ { "db": "IVD", "id": "7d8430d0-463f-11e9-a56d-000c29342cb1" }, { "db": "CNVD", "id": "CNVD-2019-00984" }, { "db": "VULHUB", "id": "VHN-126929" }, { "db": "BID", "id": "106788" }, { "db": "JVNDB", "id": "JVNDB-2018-015271" }, { "db": "NVD", "id": "CVE-2018-16558" }, { "db": "CNNVD", "id": "CNNVD-201901-307" } ] }, "id": "VAR-201904-0656", "iot": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": true, "sources": [ { "db": "IVD", "id": "7d8430d0-463f-11e9-a56d-000c29342cb1" }, { "db": "CNVD", "id": "CNVD-2019-00984" }, { "db": "VULHUB", "id": "VHN-126929" } ], "trust": 1.48274233 }, "iot_taxonomy": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "category": [ "ICS" ], "sub_category": null, "trust": 0.8 } ], "sources": [ { "db": "IVD", "id": "7d8430d0-463f-11e9-a56d-000c29342cb1" }, { "db": "CNVD", "id": "CNVD-2019-00984" } ] }, "last_update_date": "2023-12-18T13:33:32.005000Z", "patch": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/patch#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "title": "SSA-180635", "trust": 0.8, "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-180635.pdf" }, { "title": "Patch for Siemens SIMATIC S7-1500 CPU Denial of Service Vulnerability", "trust": 0.6, "url": "https://www.cnvd.org.cn/patchinfo/show/149559" }, { "title": "SIMATIC S7-1500 CPU Security vulnerabilities", "trust": 0.6, "url": "http://www.cnnvd.org.cn/web/xxk/bdxqbyid.tag?id=88502" } ], "sources": [ { "db": "CNVD", "id": "CNVD-2019-00984" }, { "db": "JVNDB", "id": "JVNDB-2018-015271" }, { "db": "CNNVD", "id": "CNNVD-201901-307" } ] }, "problemtype_data": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "problemtype": "CWE-20", "trust": 1.9 } ], "sources": [ { "db": "VULHUB", "id": "VHN-126929" }, { "db": "JVNDB", "id": "JVNDB-2018-015271" }, { "db": "NVD", "id": "CVE-2018-16558" } ] }, "references": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/references#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "trust": 2.6, "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-180635.pdf" }, { "trust": 1.4, "url": "https://nvd.nist.gov/vuln/detail/cve-2018-16558" }, { "trust": 0.8, "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2018-16558" }, { "trust": 0.8, "url": "https://www.us-cert.gov/ics/advisories/icsa-19-036-04" }, { "trust": 0.6, "url": "https://vigilance.fr/vulnerability/simatic-s7-1500-denial-of-service-via-http-28198" }, { "trust": 0.6, "url": "http://www.securityfocus.com/bid/106788" }, { "trust": 0.3, "url": "http://www.siemens.com/" } ], "sources": [ { "db": "CNVD", "id": "CNVD-2019-00984" }, { "db": "VULHUB", "id": "VHN-126929" }, { "db": "BID", "id": "106788" }, { "db": "JVNDB", "id": "JVNDB-2018-015271" }, { "db": "NVD", "id": "CVE-2018-16558" }, { "db": "CNNVD", "id": "CNNVD-201901-307" } ] }, "sources": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", "data": { "@container": "@list" } }, "data": [ { "db": "IVD", "id": "7d8430d0-463f-11e9-a56d-000c29342cb1" }, { "db": "CNVD", "id": "CNVD-2019-00984" }, { "db": "VULHUB", "id": "VHN-126929" }, { "db": "BID", "id": "106788" }, { "db": "JVNDB", "id": "JVNDB-2018-015271" }, { "db": "NVD", "id": "CVE-2018-16558" }, { "db": "CNNVD", "id": "CNNVD-201901-307" } ] }, "sources_release_date": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#", "data": { "@container": "@list" } }, "data": [ { "date": "2019-01-10T00:00:00", "db": "IVD", "id": "7d8430d0-463f-11e9-a56d-000c29342cb1" }, { "date": "2019-01-10T00:00:00", "db": "CNVD", "id": "CNVD-2019-00984" }, { "date": "2019-04-17T00:00:00", "db": "VULHUB", "id": "VHN-126929" }, { "date": "2019-01-08T00:00:00", "db": "BID", "id": "106788" }, { "date": "2019-05-17T00:00:00", "db": "JVNDB", "id": "JVNDB-2018-015271" }, { "date": "2019-04-17T14:29:03.293000", "db": "NVD", "id": "CVE-2018-16558" }, { "date": "2019-01-10T00:00:00", "db": "CNNVD", "id": "CNNVD-201901-307" } ] }, "sources_update_date": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#", "data": { "@container": "@list" } }, "data": [ { "date": "2019-01-10T00:00:00", "db": "CNVD", "id": "CNVD-2019-00984" }, { "date": "2019-04-18T00:00:00", "db": "VULHUB", "id": "VHN-126929" }, { "date": "2019-02-06T07:00:00", "db": "BID", "id": "106788" }, { "date": "2019-07-08T00:00:00", "db": "JVNDB", "id": "JVNDB-2018-015271" }, { "date": "2019-04-18T15:12:00.910000", "db": "NVD", "id": "CVE-2018-16558" }, { "date": "2019-04-19T00:00:00", "db": "CNNVD", "id": "CNNVD-201901-307" } ] }, "threat_type": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/threat_type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "remote", "sources": [ { "db": "CNNVD", "id": "CNNVD-201901-307" } ], "trust": 0.6 }, "title": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/title#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "Siemens SIMATIC S7-1500 CPU Denial of service vulnerability", "sources": [ { "db": "IVD", "id": "7d8430d0-463f-11e9-a56d-000c29342cb1" }, { "db": "CNVD", "id": "CNVD-2019-00984" } ], "trust": 0.8 }, "type": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "Input validation error", "sources": [ { "db": "IVD", "id": "7d8430d0-463f-11e9-a56d-000c29342cb1" }, { "db": "CNNVD", "id": "CNNVD-201901-307" } ], "trust": 0.8 } }
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.