Skip to content
Fencer Intel
medium 6.7

CVE-2018-4844 json

A vulnerability has been identified in SIMATIC WinCC OA UI for Android (All versions < V3.15.10), SIMATIC WinCC OA UI for iOS (All versions…

published 2018-03-20 8 y ago modified 2026-06-17 4 mo ago also EUVD-2018-16630

cvss
6.7
version 3.1, NVD
cisa kev
Not listed
not in CISA's catalog
epss
0.4%
EPSS 0.4% chance of exploitation in 30 days, percentile 36%
public exploits
0
none known

Summary

A vulnerability has been identified in SIMATIC WinCC OA UI for Android (All versions < V3.15.10), SIMATIC WinCC OA UI for iOS (All versions < V3.15.10). Insufficient limitation of CONTROL script capabilities could allow read and write access from one HMI project cache folder to other HMI project cache folders within the app's sandbox on the same mobile device. This includes HMI project cache folders of other configured WinCC OA servers. The security vulnerability could be exploited by an attacker who tricks an app user to connect to an attacker-controlled WinCC OA server. Successful exploitation requires user interaction and read/write access to the app's folder on a mobile device. The vulnerability could allow reading data from and writing data to the app's folder. At the time of advisory publication no public exploitation of this security vulnerability was known. Siemens confirms the security vulnerability and provides mitigations to resolve the security issue.

Patch / fix

  • siemens simatic_wincc_oa_ui 3.15.10

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

cisa ICSA-18-081-01 updated cvss 5.1

ICSA-18-081-01 Siemens SIMATIC WinCC OA UI Mobile App

  • Siemens SIMATIC WinCC OA UI for Android <V3.15.10
    affected: fixed in V3.15.10, mitigation play.google.com
  • Siemens SIMATIC WinCC OA UI for iOS <V3.15.10
    affected: fixed in V3.15.10, mitigation itunes.apple.com

Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf

Exploit prediction

0.42% chance of exploitation in the next 30 days, higher than 36% of all scored CVEs (FIRST EPSS, 2026-11-09).

CVSS scores

assigned by version score vector
NVD 3.1 6.7 CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
NVD 2.0 3.8 AV:A/AC:M/Au:S/C:P/I:P/A:N

Affected products

  • Siemens AG SIMATIC WinCC OA UI for Android, SIMATIC WinCC OA UI for iOS

Classification

Weakness
  • CWE-284 Improper Access Control
  • CWE-269 Improper Privilege Management

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.