CVE-2018-13812

A vulnerability has been identified in SIMATIC HMI Comfort Panels 4" - 22" (All versions < V15 Update 4), SIMATIC HMI Comfort Outdoor Panels 7" & 15" (All versions < V15 Update 4), SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 and KTP900F (All versions < V15 Update 4), SIMATIC WinCC Runtime Advanced (All versions < V15 Update 4), SIMATIC WinCC Runtime Professional (All versions < V15 Update 4), SIMATIC WinCC (TIA Portal) (All versions < V15 Update 4), SIMATIC HMI Classic Devices (TP/MP/OP/MP Mobile Panel) (All versions). A directory traversal vulnerability could allow to download arbitrary files from the device. The security vulnerability could be exploited by an attacker with network access to the integrated web server. No user interaction and no authentication is required to exploit the vulnerability. The vulnerability impacts the confidentiality of the device. At the time of advisory publication no public exploitation of this security vulnerability was known.

• CWE-22
• CWE-22

• http://www.securityfocus.com/bid/105922Third Party Advisory, VDB Entry
• https://cert-portal.siemens.com/productcert/pdf/ssa-233109.pdfVendor Advisory
• http://www.securityfocus.com/bid/105922Third Party Advisory, VDB Entry
• https://cert-portal.siemens.com/productcert/pdf/ssa-233109.pdfVendor Advisory

Published

Dec 13, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-13806A vulnerability has been identified in SIEMENS TD Keypad Des…
• CVE-2018-13807A vulnerability has been identified in SCALANCE X300 (All ve…
• CVE-2018-13808A vulnerability has been identified in CP 1604 (All versions…
• CVE-2018-13809A vulnerability has been identified in CP 1604 (All versions…
• CVE-2018-13810A vulnerability has been identified in CP 1604 (All versions…
• CVE-2018-13811A vulnerability has been identified in SIMATIC STEP 7 (TIA P…
• CVE-2018-13813A vulnerability has been identified in SIMATIC HMI Comfort P…
• CVE-2018-13814A vulnerability has been identified in SIMATIC HMI Comfort P…
• CVE-2018-13815A vulnerability has been identified in SIMATIC S7-1200 (All …
• CVE-2018-13816A vulnerability has been identified in TIM 1531 IRC (All ver…
• CVE-2018-13817Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2018-13818Twig before 2.4.4 allows Server-Side Template Injection (SST…