Denial of Service Vulnerability in Siemens OpenPCS and SIMATIC Products
CVE-2018-4832
7.5HIGH
Key Information:
- Vendor
Siemens
- Vendor
- CVE Published:
- 24 April 2018
What is CVE-2018-4832?
A vulnerability in Siemens OpenPCS and SIMATIC products allows specially crafted messages sent to the RPC service to trigger a Denial-of-Service condition. This can impair remote and local communication functionalities, necessitating a system reboot to restore operation. Exploitation requires network access to the Application Server. As of the advisory release, no public incidents of exploitation were known.
Affected Version(s)
OpenPCS 7 V7.1 and earlier All versions
OpenPCS 7 V8.0 All versions
OpenPCS 7 V8.1 All versions < V8.1 Upd5