Skip to content
Fencer Intel
high 7.5

CVE-2018-4832 json

A vulnerability has been identified in OpenPCS 7 V7.1 and earlier (All versions), OpenPCS 7 V8.0 (All versions), OpenPCS 7 V8.1 (All versio…

published 2018-04-24 8 y ago modified 2026-06-17 4 mo ago also EUVD-2018-16618

cvss
7.5
version 3.1, NVD
cisa kev
Not listed
not in CISA's catalog
epss
2.4%
EPSS 2.4% chance of exploitation in 30 days, percentile 84%
public exploits
0
none known

Summary

A vulnerability has been identified in OpenPCS 7 V7.1 and earlier (All versions), OpenPCS 7 V8.0 (All versions), OpenPCS 7 V8.1 (All versions < V8.1 Upd5), OpenPCS 7 V8.2 (All versions), OpenPCS 7 V9.0 (All versions < V9.0 Upd1), SIMATIC BATCH V7.1 and earlier (All versions), SIMATIC BATCH V8.0 (All versions < V8.0 SP1 Upd21), SIMATIC BATCH V8.1 (All versions < V8.1 SP1 Upd16), SIMATIC BATCH V8.2 (All versions < V8.2 Upd10), SIMATIC BATCH V9.0 (All versions < V9.0 SP1), SIMATIC NET PC Software V14 (All versions < V14 SP1 Update 14), SIMATIC NET PC Software V15 (All versions < 15 SP1), SIMATIC PCS 7 V7.1 and earlier (All versions), SIMATIC PCS 7 V8.0 (All versions), SIMATIC PCS 7 V8.1 (All versions), SIMATIC PCS 7 V8.2 (All versions < V8.2 SP1), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP1), SIMATIC Route Control V7.1 and earlier (All versions), SIMATIC Route Control V8.0 (All versions), SIMATIC Route Control V8.1 (All versions), SIMATIC Route Control V8.2 (All versions), SIMATIC Route Control V9.0 (All versions < V9.0 Upd1), SIMATIC WinCC Runtime Professional V13 (All versions < V13 SP2 Upd2), SIMATIC WinCC Runtime Professional V14 (All versions < V14 SP1 Upd5), SIMATIC WinCC V7.2 and earlier (All versions < WinCC 7.2 Upd 15), SIMATIC WinCC V7.3 (All versions < WinCC 7.3 Upd 16), SIMATIC WinCC V7.4 (All versions < V7.4 SP1 Upd 4), SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). Specially crafted messages sent to the RPC service of the affected products could cause a Denial-of-Service condition on the remote and local communication functionality of the affected products. A reboot of the system is required to recover the remote and local communication functionality. Please note that an attacker needs to have network access to the Application Server in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.

Patch / fix

  • siemens simatic_net_pc 15
  • siemens simatic_wincc_runtime_professional 13
  • siemens simatic_wincc 7.2
  • siemens sppa-t3000_application_server r8.2
  • siemens simatic_net_pc_software 14.0

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

cisa ICSA-18-088-03 updated cvss 7.5

Siemens SIMATIC PCS 7, SIMATIC WinCC, SIMATIC WinCC Runtime Professional, and SIMATIC NET PC Software (Update G)

  • Siemens OpenPCS 7 V7.1 and earlier Siemens OpenPCS 7 V8.0
    affected: mitigation, no fix planned
  • Siemens OpenPCS 7 V8.1 <V8.1_Upd5
    affected: vendor fix, mitigation support.industry.siemens.com
  • Siemens OpenPCS 7 V8.2 Siemens OpenPCS 7 V9.0 <V9.0_Upd1
    affected: vendor fix, mitigation
  • Siemens SIMATIC BATCH V7.1 and earlier
    affected: mitigation, no fix planned
  • Siemens SIMATIC BATCH V8.0 <V8.0_SP1_Upd21
    affected: vendor fix, mitigation support.industry.siemens.com
  • Siemens SIMATIC BATCH V8.1 <V8.1_SP1_Upd16
    affected: vendor fix, mitigation support.industry.siemens.com
  • Siemens SIMATIC BATCH V8.2 <V8.2_Upd10
    affected: vendor fix, mitigation support.industry.siemens.com
  • Siemens SIMATIC BATCH V9.0 <V9.0_SP1
    affected: vendor fix, mitigation
show 12 more
  • Siemens SIMATIC NET PC Software V14 <V14_SP1_Update_14
    affected: fixed in V14, mitigation support.industry.siemens.com
  • Siemens SIMATIC NET PC Software V15 <15_SP1
    affected: fixed in V15, mitigation support.industry.siemens.com
  • Siemens SIMATIC PCS 7 V7.1 and earlier Siemens SIMATIC PCS 7 V8.0 Siemens SIMATIC PCS 7 V8.1
    affected: mitigation, no fix planned
  • Siemens SIMATIC PCS 7 V8.2 <V8.2_SP1
    affected: fixed in V8.2, mitigation
  • Siemens SIMATIC PCS 7 V9.0 <V9.0_SP1
    affected: fixed in V9.0, mitigation
  • Siemens SIMATIC Route Control V7.1 and earlier Siemens SIMATIC Route Control V8.0 Siemens SIMATIC Route Control V8.1
    affected: mitigation, no fix planned
  • Siemens SIMATIC Route Control V8.2 Siemens SIMATIC Route Control V9.0 <V9.0_Upd1
    affected: vendor fix, mitigation
  • Siemens SIMATIC WinCC Runtime Professional V13 <V13_SP2_Upd2
    affected: fixed in V13, mitigation support.industry.siemens.com
  • Siemens SIMATIC WinCC Runtime Professional V14 <V14_SP1_Upd5
    affected: fixed in V14, mitigation support.industry.siemens.com
  • Siemens SIMATIC WinCC V7.2 and earlier <WinCC_7.2_Upd_15
    affected: vendor fix, mitigation support.industry.siemens.com
  • Siemens SIMATIC WinCC V7.3 <WinCC_7.3_Upd_16
    affected: vendor fix, mitigation support.industry.siemens.com
  • Siemens SIMATIC WinCC V7.4 <V7.4_SP1_Upd_4
    affected: fixed in V7.4, mitigation support.industry.siemens.com

Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf

cisa ICSA-19-351-02 updated cvss 7.5

Siemens SPPA-T3000 (Update A)

  • Siemens SPPA-T3000 Application Server <Service_Pack_R8.2_SP2
    affected: vendor fix, mitigation

Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf

Exploit prediction

2.42% chance of exploitation in the next 30 days, higher than 84% of all scored CVEs (FIRST EPSS, 2026-11-09).

CVSS scores

assigned by version score vector
NVD 3.1 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NVD 2.0 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P

Affected products

  • Siemens OpenPCS 7 V7.1 and earlier
  • Siemens OpenPCS 7 V8.0
  • Siemens OpenPCS 7 V8.1
  • Siemens OpenPCS 7 V8.2
  • Siemens OpenPCS 7 V9.0
  • Siemens SIMATIC BATCH V7.1 and earlier
  • Siemens SIMATIC BATCH V8.0
  • Siemens SIMATIC BATCH V8.1
  • Siemens SIMATIC BATCH V8.2
  • Siemens SIMATIC BATCH V9.0
  • Siemens SIMATIC NET PC Software V14
  • Siemens SIMATIC NET PC Software V15
  • Siemens SIMATIC PCS 7 V7.1 and earlier
  • Siemens SIMATIC PCS 7 V8.0
  • Siemens SIMATIC PCS 7 V8.1
  • Siemens SIMATIC PCS 7 V8.2
  • Siemens SIMATIC PCS 7 V9.0
  • Siemens SIMATIC Route Control V7.1 and earlier
  • Siemens SIMATIC Route Control V8.0
  • Siemens SIMATIC Route Control V8.1
  • Siemens SIMATIC Route Control V8.2
  • Siemens SIMATIC Route Control V9.0
  • Siemens SIMATIC WinCC Runtime Professional V13
  • Siemens SIMATIC WinCC Runtime Professional V14
  • Siemens SIMATIC WinCC V7.2 and earlier
  • Siemens SIMATIC WinCC V7.3
  • Siemens SIMATIC WinCC V7.4
  • Siemens SPPA-T3000 Application Server

Classification

Weakness
  • CWE-20 Improper Input Validation

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.