CVE-2018-4834: falha crítica em Siemens Desigo PXC00-E.D V4.10
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
28Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 9.8epss 3.3%
A vulnerability has been identified in Desigo PXC00-E.D V4.10 (All versions < V4.10.111), Desigo PXC00-E.D V5.00 (All versions < V5.0.171), Desigo PXC00-E.D V5.10 (All versions < V5.10.69), Desigo PXC00-E.D V6.00 (All versions < V6.0.204), Desigo PXC00/64/128-U V4.10 (All versions < V4.10.111 only with web module), Desigo PXC00/64/128-U V5.00 (All versions < V5.0.171 only with web module), Desigo PXC00/64/128-U V5.10 (All versions < V5.10.69 only with web module), Desigo PXC00/64/128-U V6.00 (All versions < V6.0.204 only with web module), Desigo PXC001-E.D V4.10 (All versions < V4.10.111), Desigo PXC001-E.D V5.00 (All versions < V5.0.171), Desigo PXC001-E.D V5.10 (All versions < V5.10.69), Desigo PXC001-E.D V6.00 (All versions < V6.0.204), Desigo PXC100-E.D V4.10 (All versions < V4.10.111), Desigo PXC100-E.D V5.00 (All versions < V5.0.171), Desigo PXC100-E.D V5.10 (All versions < V5.10.69), Desigo PXC100-E.D V6.00 (All versions < V6.0.204), Desigo PXC12-E.D V4.10 (All versions < V4.10.111), Desigo PXC12-E.D V5.00 (All versions < V5.0.171), Desigo PXC12-E.D V5.10 (All versions < V5.10.69), Desigo PXC12-E.D V6.00 (All versions < V6.0.204), Desigo PXC200-E.D V4.10 (All versions < V4.10.111), Desigo PXC200-E.D V5.00 (All versions < V5.0.171), Desigo PXC200-E.D V5.10 (All versions < V5.10.69), Desigo PXC200-E.D V6.00 (All versions < V6.0.204), Desigo PXC22-E.D V4.10 (All versions < V4.10.111), Desigo PXC22-E.D V5.00 (All versions < V5.0.171), Desigo PXC22-E.D V5.10 (All versions < V5.10.69), Desigo PXC22-E.D V6.00 (All versions < V6.0.204), Desigo PXC22.1-E.D V4.10 (All versions < V4.10.111), Desigo PXC22.1-E.D V5.00 (All versions < V5.0.171), Desigo PXC22.1-E.D V5.10 (All versions < V5.10.69), Desigo PXC22.1-E.D V6.00 (All versions < V6.0.204), Desigo PXC36.1-E.D V4.10 (All versions < V4.10.111), Desigo PXC36.1-E.D V5.00 (All versions < V5.0.171), Desigo PXC36.1-E.D V5.10 (All versions < V5.10.69), Desigo PXC36.1-E.D V6.00 (All versions < V6.0.204), Desigo PXC50-E.D V4.10 (All versions < V4.10.111), Desigo PXC50-E.D V5.00 (All versions < V5.0.171), Desigo PXC50-E.D V5.10 (All versions < V5.10.69), Desigo PXC50-E.D V6.00 (All versions < V6.0.204), Desigo PXM20-E V4.10 (All versions < V4.10.111), Desigo PXM20-E V5.00 (All versions < V5.0.171), Desigo PXM20-E V5.10 (All versions < V5.10.69), Desigo PXM20-E V6.00 (All versions < V6.0.204). A remote attacker with network access to the device could potentially upload a new firmware image to the devices without prior authentication.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
Produtos afetados
Siemens · Desigo PXC001-E.D V4.10Siemens · Desigo PXC001-E.D V5.00Siemens · Desigo PXC001-E.D V5.10Siemens · Desigo PXC001-E.D V6.00Siemens · Desigo PXC00/64/128-U V4.10Siemens · Desigo PXC00/64/128-U V5.00Siemens · Desigo PXC00/64/128-U V5.10Siemens · Desigo PXC00/64/128-U V6.00Siemens · Desigo PXC00-E.D V4.10Siemens · Desigo PXC00-E.D V5.00Siemens · Desigo PXC00-E.D V5.10Siemens · Desigo PXC00-E.D V6.00Siemens · Desigo PXC100-E.D V4.10Siemens · Desigo PXC100-E.D V5.00Siemens · Desigo PXC100-E.D V5.10Siemens · Desigo PXC100-E.D V6.00Siemens · Desigo PXC12-E.D V4.10Siemens · Desigo PXC12-E.D V5.00Siemens · Desigo PXC12-E.D V5.10Siemens · Desigo PXC12-E.D V6.00Siemens · Desigo PXC200-E.D V4.10Siemens · Desigo PXC200-E.D V5.00Siemens · Desigo PXC200-E.D V5.10Siemens · Desigo PXC200-E.D V6.00Siemens · Desigo PXC22.1-E.D V4.10Siemens · Desigo PXC22.1-E.D V5.00Siemens · Desigo PXC22.1-E.D V5.10Siemens · Desigo PXC22.1-E.D V6.00Siemens · Desigo PXC22-E.D V4.10Siemens · Desigo PXC22-E.D V5.00Siemens · Desigo PXC22-E.D V5.10Siemens · Desigo PXC22-E.D V6.00Siemens · Desigo PXC36.1-E.D V4.10Siemens · Desigo PXC36.1-E.D V5.00Siemens · Desigo PXC36.1-E.D V5.10Siemens · Desigo PXC36.1-E.D V6.00Siemens · Desigo PXC50-E.D V4.10Siemens · Desigo PXC50-E.D V5.00Siemens · Desigo PXC50-E.D V5.10Siemens · Desigo PXC50-E.D V6.00Siemens · Desigo PXM20-E V4.10Siemens · Desigo PXM20-E V5.00Siemens · Desigo PXM20-E V5.10Siemens · Desigo PXM20-E V6.00