Executive Summary
| Informations | |||
|---|---|---|---|
| Name | CVE-2018-13807 | First vendor Publication | 2018-09-12 |
| Vendor | Cve | Last vendor Modification | 2019-10-09 |
Security-Database Scoring CVSS v3
| Cvss vector : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H | |||
|---|---|---|---|
| Overall CVSS Score | 8.6 | ||
| Base Score | 8.6 | Environmental Score | 8.6 |
| impact SubScore | 4 | Temporal Score | 8.6 |
| Exploitabality Sub Score | 3.9 | ||
| Attack Vector | Network | Attack Complexity | Low |
| Privileges Required | None | User Interaction | None |
| Scope | Changed | Confidentiality Impact | None |
| Integrity Impact | None | Availability Impact | High |
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:L/Au:N/C:N/I:N/A:C) | |||
|---|---|---|---|
| Cvss Base Score | 7.8 | Attack Range | Network |
| Cvss Impact Score | 6.9 | Attack Complexity | Low |
| Cvss Expoit Score | 10 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| A vulnerability has been identified in SCALANCE X300 (All versions < V4.0.0), SCALANCE X408 (All versions < V4.0.0), SCALANCE X414 (All versions). The web interface on port 443/tcp could allow an attacker to cause a Denial-of-Service condition by sending specially crafted packets to the web server. The device will automatically reboot, impacting network availability for other devices. An attacker must have network access to port 443/tcp to exploit the vulnerability. Neither valid credentials nor interaction by a legitimate user is required to exploit the vulnerability. There is no confidentiality or integrity impact, only availability is temporarily impacted. This vulnerability could be triggered by publicly available tools. |
Original Source
| Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-13807 |
CWE : Common Weakness Enumeration
| % | Id | Name |
|---|---|---|
| 100 % | CWE-20 | Improper Input Validation |
CPE : Common Platform Enumeration
| Type | Description | Count |
|---|---|---|
| Os | 2 | |
| Os | 2 | |
| Os | 1 |
Sources (Detail)
| Source | Url |
|---|---|
| BID | http://www.securityfocus.com/bid/105331 |
| CONFIRM | https://cert-portal.siemens.com/productcert/pdf/ssa-447396.pdf |
| MISC | https://ics-cert.us-cert.gov/advisories/ICSA-18-254-05 |
Alert History
| Date | Informations |
|---|---|
| 2020-05-23 02:11:14 |
|
| 2020-05-23 01:07:23 |
|
| 2019-10-10 05:20:21 |
|
| 2018-12-03 21:19:38 |
|
| 2018-09-13 17:18:58 |
|
| 2018-09-12 21:20:12 |
|
| 2018-09-12 17:19:19 |
|
