CVE-2018-13808 Information disclosure in CP 1604
An attacker with network access can extract internal communication data or cause a Denial-of-Service condition on Siemens CP 1604 and CP 1616 devices.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2018-13808?
CVE-2018-13808 is a critical vulnerability in Siemens CP 1604, published on 17 Apr 2019. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A vulnerability has been identified in CP 1604 (All versions), CP 1616 (All versions). An attacker with network access to port 23/tcp could extract internal communication data or cause a Denial-of-Service condition. Successful exploitation requires network access to a vulnerable device. At the time of advisory publication no public exploitation of this vulnerability was known.
Weakness: CWE-200
Which versions are affected by CVE-2018-13808?
It affects 2 products.
Products include Siemens Cp 1604 Firmware, Siemens Cp 1616 Firmware.
How do I fix CVE-2018-13808?
No fix has been published for CVE-2018-13808 yet. Limit exposure of the affected software until one is available.
Is CVE-2018-13808 being exploited?
There is no known exploitation of CVE-2018-13808 in the wild and no public exploit code.
Other vulnerabilities in Siemens CP 1604
Sources
Also known as GHSA-99g2-cch4-5hwg.