CVE-2018-13811: Infoleak
A vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) (All Versions < V15.1). Password hashes with insufficient computational effort could allow an attacker to access to a project file and reconstruct passwords. The vulnerability could be exploited by an attacker with local access to the project file. No user interaction is required to exploit the vulnerability. The vulnerability could allow the attacker to obtain certain passwords from the project. At the time of advisory publication no public exploitation of this vulnerability was known.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-13811?
The severity of CVE-2018-13811 is high due to its potential to allow unauthorized access to sensitive project files.
How do I fix CVE-2018-13811?
To fix CVE-2018-13811, upgrade to SIMATIC STEP 7 (TIA Portal) version 15.1 or later.
Who is affected by CVE-2018-13811?
CVE-2018-13811 affects all versions of SIMATIC STEP 7 (TIA Portal) prior to version 15.1.
Can CVE-2018-13811 be exploited remotely?
CVE-2018-13811 cannot be exploited remotely as it requires local access to the affected system.
What is the impact of exploiting CVE-2018-13811?
Exploiting CVE-2018-13811 allows an attacker to reconstruct passwords and gain unauthorized access to project files.