CVE-2018-11466

A vulnerability has been identified in SINUMERIK 808D V4.7 (All versions), SINUMERIK 808D V4.8 (All versions), SINUMERIK 828D V4.7 (All versions < V4.7 SP6 HF1), SINUMERIK 840D sl V4.7 (All versions < V4.7 SP6 HF5), SINUMERIK 840D sl V4.8 (All versions < V4.8 SP3). Specially crafted network packets sent to port 102/tcp (ISO-TSAP) could allow a remote attacker to either cause a Denial-of-Service condition of the integrated software firewall or allow to execute code in the context of the software firewall. The security vulnerability could be exploited by an attacker with network access to the affected systems on port 102/tcp. Successful exploitation requires no user privileges and no user interaction. The vulnerability could allow an attacker to compromise confidentiality, integrity and availability of the system. At the time of advisory publication no public exploitation of this security vulnerability was known

• CWE-248

• http://www.securityfocus.com/bid/106185Third Party Advisory, VDB Entry
• https://cert-portal.siemens.com/productcert/pdf/ssa-170881.pdfVendor Advisory
• http://www.securityfocus.com/bid/106185Third Party Advisory, VDB Entry
• https://cert-portal.siemens.com/productcert/pdf/ssa-170881.pdfVendor Advisory

Published

Dec 12, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-11460A vulnerability has been identified in SINUMERIK 808D V4.7 (…
• CVE-2018-11461A vulnerability has been identified in SINUMERIK 808D V4.7 (…
• CVE-2018-11462A vulnerability has been identified in SINUMERIK 808D V4.7 (…
• CVE-2018-11463A vulnerability has been identified in SINUMERIK 808D V4.7 (…
• CVE-2018-11464A vulnerability has been identified in SINUMERIK 828D V4.7 (…
• CVE-2018-11465A vulnerability has been identified in SINUMERIK 808D V4.7 (…
• CVE-2018-11468The __mkd_trim_line function in mkdio.c in libmarkdown.a in …
• CVE-2018-11469Incorrect caching of responses to requests including an Auth…
• CVE-2018-1147In Nessus before 7.1.0, a XSS vulnerability exists due to im…
• CVE-2018-11470iScripts eSwap v2.4 has SQL injection via the "search.php" '…
• CVE-2018-11471Cockpit 0.5.5 has XSS via a collection, form, or region.
• CVE-2018-11472Monstra CMS 3.0.4 has Reflected XSS during Login (i.e., the …