CVE-2018-11449
Last modified
CVE-2018-11449 is a vulnerability of currently unknown severity. A vulnerability has been identified in SCALANCE M875 (All versions). An attacker with access to the local file system might obtain passwords for administrative users. EPSS estimates a 0.42% chance of exploitation in the next 30 days.
Description
A vulnerability has been identified in SCALANCE M875 (All versions). An attacker with access to the local file system might obtain passwords for administrative users. Successful exploitation requires read access to files on the local file system. A successful attack could allow an attacker to obtain administrative passwords. At the time of advisory publication no public exploitation of this security vulnerability was known.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Siemens | Scalance M875 Firmware | All versions |
References
- https://cert-portal.siemens.com/productcert/pdf/ssa-977428.pdfThird Party Advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-977428.pdfThird Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2018-11449?
How severe is CVE-2018-11449?
How do I fix CVE-2018-11449?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2018
- CVE-2018-11443The parameter q is affected by Cross-site Scripting in jobca…
- CVE-2018-11444A SQL Injection issue was observed in the parameter "q" in j…
- CVE-2018-11445A CSRF issue was discovered on the User Add/System Settings …
- CVE-2018-11446The buy function of a smart contract implementation for Gold…
- CVE-2018-11447A vulnerability has been identified in SCALANCE M875 (All ve…
- CVE-2018-11448A vulnerability has been identified in SCALANCE M875 (All ve…
- CVE-2018-1145A remote unauthenticated user can overflow a stack buffer in…
- CVE-2018-11450A reflected Cross-Site-Scripting (XSS) vulnerability has bee…
- CVE-2018-11451A vulnerability has been identified in Firmware variant IEC …
- CVE-2018-11452A vulnerability has been identified in Firmware variant IEC …
- CVE-2018-11453A vulnerability has been identified in SIMATIC STEP 7 (TIA P…
- CVE-2018-11454A vulnerability has been identified in SIMATIC STEP 7 (TIA P…
Are you affected by CVE-2018-11449?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST