CVE-2018-13809: XSS
A vulnerability has been identified in CP 1604 (All versions), CP 1616 (All versions). The integrated web server of the affected CP devices could allow Cross-Site Scripting (XSS) attacks if unsuspecting users are tricked into following a malicious link. User interaction is required for a successful exploitation. At the time of advisory publication no public exploitation of this vulnerability was known.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-13809?
CVE-2018-13809 has been rated as a medium severity vulnerability due to the potential for Cross-Site Scripting (XSS) attacks.
How do I fix CVE-2018-13809?
To mitigate CVE-2018-13809, ensure you are using the latest firmware version for Siemens CP 1604 and CP 1616 devices.
What devices are affected by CVE-2018-13809?
CVE-2018-13809 affects all versions of Siemens CP 1604 and CP 1616 with firmware versions up to 2.8.
What type of attack is associated with CVE-2018-13809?
CVE-2018-13809 is associated with Cross-Site Scripting (XSS) attacks that require user interaction to exploit.
Who is impacted by CVE-2018-13809?
Users of Siemens CP 1604 and CP 1616 devices are impacted by CVE-2018-13809 if they are tricked into clicking malicious links.