Search/CVE-2018-4843
● CVE — Medium

CVE-2018-4843

VendorsiemensProductsimatic cp 343-1 firmware, simatic cp 443-1 firmware, simatic s7-1500 firmware, simatic s7-300 firmware, simatic s7-400 h v6 firmware, simatic s7-400 pn/dp v6 firmware, simatic s7-400 pn/dp v7 firmware, simatic s7-410 firmware, simatic winac rtx 2010 firmware, sinumerik 828d firmware, softnet pn-io linux firmwareDiscoveredMar 20, 2018UpdatedNov 21, 2024

A vulnerability has been identified in SIMATIC S7-400 CPU 414-3 PN/DP V7 (All versions < V7.0.3), SIMATIC S7-400 CPU 414F-3 PN/DP V7 (All versions < V7.0.3), SIMATIC S7-400 CPU 416-3 PN/DP V7 (All versions < V7.0.3), SIMATIC S7-400 CPU 416F-3 PN/DP V7 (All versions < V7.0.3), SIMATIC CP 343-1 (incl. SIPLUS variants) (All versions), SIMATIC CP 343-1 Advanced (incl. SIPLUS variants) (All versions), SIMATIC CP 443-1 (All versions < V3.3), SIMATIC CP 443-1 (All versions < V3.3), SIMATIC CP 443-1 Advanced (All versions < V3.3), SIMATIC ET 200pro IM154-8 PN/DP CPU (All versions < V3.2.16), SIMATIC ET 200pro IM154-8F PN/DP CPU (All versions < V3.2.16), SIMATIC ET 200pro IM154-8FX PN/DP CPU (All versions < V3.2.16), SIMATIC ET 200S IM151-8 PN/DP CPU (All versions < V3.2.16), SIMATIC ET 200S…

View graph Watch Export
CVSS v3.1
6.5 MEDIUM
EPSS
0.54%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
EPSS Trend
Aug 16, 2026 → Aug 30, 2026
● 0.00pp
0.55% → 0.54% over 2 tracked changes
CVSS v3.1 Detail
Attack VectorADJACENT
Attack ComplexityLOW
Privileges RequiredNONE
User InteractionNONE
ScopeUNCHANGED
ConfidentialityNONE
IntegrityNONE
AvailabilityHIGH
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Connections
12 relationships
Timeline
disclosure → media coverage
Mar 20, 2018
Disclosure — published as a CVE record. · last revised by NVD Nov 21, 2024