CVE-2018-13798

A vulnerability has been identified in SICAM A8000 CP-8000 (All versions < V14), SICAM A8000 CP-802X (All versions < V14), SICAM A8000 CP-8050 (All versions < V2.00). Specially crafted network packets sent to port 80/TCP or 443/TCP could allow an unauthenticated remote attacker to cause a Denial-of-Service condition of the web server. The security vulnerability could be exploited by an attacker with network access to the affected systems on port 80/TCP or 443/TCP. Successful exploitation requires no system privileges and no user interaction. An attacker could use the vulnerability to compromise availability of the web server. A system reboot is required to recover the web service of the device. At the time of advisory update, exploit code for this security vulnerability is public.

• CWE-20

• https://cert-portal.siemens.com/productcert/pdf/ssa-579309.pdfPatch, Vendor Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-579309.pdfPatch, Vendor Advisory

Published

Mar 21, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-13792Multiple SQL injection vulnerabilities in the monitoring fea…9.8
• CVE-2018-13793Multiple Cross Site Request Forgery (CSRF) vulnerabilities i…
• CVE-2018-13794A heap-based buffer overflow exists in stbi__bmp_load_cont i…9.8
• CVE-2018-13795Gravity before 0.5.1 does not support a maximum recursion de…
• CVE-2018-13796An issue was discovered in GNU Mailman before 2.1.28. A craf…
• CVE-2018-13797The macaddress module before 0.2.9 for Node.js is prone to a…
• CVE-2018-13799A vulnerability has been identified in SIMATIC WinCC OA V3.1…
• CVE-2018-1380IBM InfoSphere Master Data Management Collaboration Server 1…2.7
• CVE-2018-13800A vulnerability has been identified in SIMATIC S7-1200 CPU f…
• CVE-2018-13801A vulnerability has been identified in ROX II (All versions …
• CVE-2018-13802A vulnerability has been identified in ROX II (All versions …
• CVE-2018-13803Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…