CVE-2018-25112
Last modified
CVE-2018-25112 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. An unauthenticated remote attacker may use an uncontrolled resource consumption in the IEC 61131 program of the affected products by creating large amounts of network traffic that needs to be handled by the ILC. This results in a Denial-of-Service of the device.. EPSS estimates a 0.39% chance of exploitation in the next 30 days.
Description
An unauthenticated remote attacker may use an uncontrolled resource consumption in the IEC 61131 program of the affected products by creating large amounts of network traffic that needs to be handled by the ILC. This results in a Denial-of-Service of the device.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2018-25112?
How severe is CVE-2018-25112?
How do I fix CVE-2018-25112?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2018
- CVE-2018-25106A vulnerability, which was classified as critical, has been …6.3
- CVE-2018-25107The Crypt::Random::Source package before 0.13 for Perl has a…7.5
- CVE-2018-25108An unauthenticated remote attacker can cause a DoS in the co…7.5
- CVE-2018-25109A vulnerability has been found in Nintendo Animal Crossing, …6.4
- CVE-2018-25110Marked prior to version 0.3.17 is vulnerable to a Regular Ex…7.5
- CVE-2018-25111django-helpdesk before 1.0.0 allows Sensitive Data Exposure …4.4
- CVE-2018-25113An unauthenticated path traversal vulnerability exists in Di…8.7
- CVE-2018-25114A remote code execution vulnerability exists within osCommer…9.3
- CVE-2018-25115Multiple D-Link DIR-series routers, including DIR-110, DIR-4…9.8
- CVE-2018-25116MyBB Thread Redirect Plugin 0.2.1 contains a cross-site scri…6.1
- CVE-2018-25117VestaCP commit a3f0fa1 (2018-05-31) up to commit ee03eff (20…9.3
- CVE-2018-25118GeoVision embedded IP devices, confirmed on GV-BX1500 and GV…10
Are you affected by CVE-2018-25112?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST