CVE-2018-4860
Last modified
CVE-2018-4860 is a vulnerability of currently unknown severity. A vulnerability has been identified in SCALANCE M875 (All versions). An authenticated remote attacker with access to the web interface (443/tcp), could execute arbitrary operating system commands. EPSS estimates a 3.74% chance of exploitation in the next 30 days.
Description
A vulnerability has been identified in SCALANCE M875 (All versions). An authenticated remote attacker with access to the web interface (443/tcp), could execute arbitrary operating system commands. Successful exploitation requires that the attacker has network access to the web interface. The attacker must be authenticated as administrative user to exploit the security vulnerability. The vulnerability could allow an attacker to execute arbitrary code on the device. At the time of advisory publication no public exploitation of this security vulnerability was known.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Siemens | Scalance M875 Firmware | All versions |
References
- https://cert-portal.siemens.com/productcert/pdf/ssa-977428.pdfThird Party Advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-977428.pdfThird Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2018-4860?
How severe is CVE-2018-4860?
How do I fix CVE-2018-4860?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2018
- CVE-2018-4854A vulnerability has been identified in SICLOCK TC100 (All ve…
- CVE-2018-4855A vulnerability has been identified in SICLOCK TC100 (All ve…
- CVE-2018-4856A vulnerability has been identified in SICLOCK TC100 (All ve…
- CVE-2018-4857Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2018-4858A vulnerability has been identified in IEC 61850 system conf…7.8
- CVE-2018-4859A vulnerability has been identified in SCALANCE M875 (All ve…
- CVE-2018-4861A vulnerability has been identified in SCALANCE M875 (All ve…
- CVE-2018-4862In Octopus Deploy versions 3.2.11 - 4.1.5 (fixed in 4.1.6), …
- CVE-2018-4863Sophos Endpoint Protection 10.7 allows local users to bypass…
- CVE-2018-4868The Exiv2::Jp2Image::readMetadata function in jp2image.cpp i…
- CVE-2018-4871An Out-of-bounds Read issue was discovered in Adobe Flash Pl…
- CVE-2018-4872An issue was discovered in Adobe Acrobat Reader 2018.009.200…
Are you affected by CVE-2018-4860?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST