CVE-2018-13807

A vulnerability has been identified in SCALANCE X300 (All versions < V4.0.0), SCALANCE X408 (All versions < V4.0.0), SCALANCE X414 (All versions). The web interface on port 443/tcp could allow an attacker to cause a Denial-of-Service condition by sending specially crafted packets to the web server. The device will automatically reboot, impacting network availability for other devices. An attacker must have network access to port 443/tcp to exploit the vulnerability. Neither valid credentials nor interaction by a legitimate user is required to exploit the vulnerability. There is no confidentiality or integrity impact, only availability is temporarily impacted. This vulnerability could be triggered by publicly available tools.

• CWE-20
• CWE-20

• http://www.securityfocus.com/bid/105331Third Party Advisory, VDB Entry
• https://cert-portal.siemens.com/productcert/pdf/ssa-447396.pdfVendor Advisory
• https://ics-cert.us-cert.gov/advisories/ICSA-18-254-05Third Party Advisory, US Government Resource, VDB Entry
• http://www.securityfocus.com/bid/105331Third Party Advisory, VDB Entry
• https://cert-portal.siemens.com/productcert/pdf/ssa-447396.pdfVendor Advisory
• https://ics-cert.us-cert.gov/advisories/ICSA-18-254-05Third Party Advisory, US Government Resource, VDB Entry

Published

Sep 12, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-13801A vulnerability has been identified in ROX II (All versions …
• CVE-2018-13802A vulnerability has been identified in ROX II (All versions …
• CVE-2018-13803Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2018-13804A vulnerability has been identified in SIMATIC IT LMS (All v…
• CVE-2018-13805A vulnerability has been identified in SIMATIC ET 200SP Open…
• CVE-2018-13806A vulnerability has been identified in SIEMENS TD Keypad Des…
• CVE-2018-13808A vulnerability has been identified in CP 1604 (All versions…
• CVE-2018-13809A vulnerability has been identified in CP 1604 (All versions…
• CVE-2018-13810A vulnerability has been identified in CP 1604 (All versions…
• CVE-2018-13811A vulnerability has been identified in SIMATIC STEP 7 (TIA P…
• CVE-2018-13812A vulnerability has been identified in SIMATIC HMI Comfort P…
• CVE-2018-13813A vulnerability has been identified in SIMATIC HMI Comfort P…