CVE-2018-4846

A vulnerability has been identified in RAPIDLab 1200 systems / RAPIDPoint 400 systems / RAPIDPoint 500 systems (All versions_without_ use of Siemens Healthineers Informatics products), RAPIDLab 1200 Series (All versions < V3.3 _with_ Siemens Healthineers Informatics products), RAPIDPoint 500 systems (All versions >= V3.0 _with_ Siemens Healthineers Informatics products), RAPIDPoint 500 systems (V2.4.X_with_ Siemens Healthineers Informatics products), RAPIDPoint 500 systems (All versions =< V2.3 _with_ Siemens Healthineers Informatics products), RAPIDPoint 400 systems (All versions _with_ Siemens Healthineers Informatics products). A factory account with hardcoded password might allow attackers access to the device over port 5900/tcp. Successful exploitation requires no user interaction or privileges and impacts the confidentiality, integrity, and availability of the affected device. At the time of advisory publication, no public exploitation of this security vulnerability is known. Siemens Healthineers confirms the security vulnerability and provides mitigations to resolve the security issue.

• CWE-798
• CWE-798

• https://cert-portal.siemens.com/productcert/pdf/ssa-755010.pdfThird Party Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-755010.pdfThird Party Advisory

Published

Jun 26, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-4840A vulnerability has been identified in DIGSI 4 (All versions…
• CVE-2018-4841A vulnerability has been identified in TIM 1531 IRC (All ver…9.8
• CVE-2018-4842A vulnerability has been identified in SCALANCE X-200IRT swi…
• CVE-2018-4843A vulnerability has been identified in SIMATIC S7-400 CPU 4…6.5
• CVE-2018-4844A vulnerability has been identified in SIMATIC WinCC OA UI f…6.7
• CVE-2018-4845A vulnerability has been identified in RAPIDLab 1200 systems…8.8
• CVE-2018-4847A vulnerability has been identified in SIMATIC WinCC OA Oper…
• CVE-2018-4848A vulnerability has been identified in SCALANCE X-200 switch…
• CVE-2018-4849A vulnerability has been identified in Siveillance VMS Video…
• CVE-2018-4850A vulnerability has been identified in SIMATIC S7-400 (incl.…
• CVE-2018-4851A vulnerability has been identified in SICLOCK TC100 (All ve…
• CVE-2018-4852A vulnerability has been identified in SICLOCK TC100 (All ve…