CVE-2018-13808: Infoleak
A vulnerability has been identified in CP 1604 (All versions), CP 1616 (All versions). An attacker with network access to port 23/tcp could extract internal communication data or cause a Denial-of-Service condition. Successful exploitation requires network access to a vulnerable device. At the time of advisory publication no public exploitation of this vulnerability was known.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-13808?
CVE-2018-13808 is classified as a high-severity vulnerability due to its potential for data extraction and Denial-of-Service impact.
How do I fix CVE-2018-13808?
To mitigate CVE-2018-13808, ensure that your Siemens CP 1604 and CP 1616 firmware are updated to the latest versions beyond 2.8, and restrict network access to port 23/tcp.
What type of devices are affected by CVE-2018-13808?
CVE-2018-13808 affects all versions of Siemens CP 1604 and CP 1616 devices.
What could an attacker do if they exploit CVE-2018-13808?
An attacker exploiting CVE-2018-13808 could extract internal communication data or potentially cause a Denial-of-Service condition.
Is CVE-2018-13808 exploitable remotely?
Yes, CVE-2018-13808 is exploitable remotely by an attacker with network access to the affected devices.