SARA / Free Tools / CVE / CVE-2018-4832

CVE-2018-4832 — A vulnerability has been identified in OpenPCS 7 V7

A vulnerability has been identified in OpenPCS 7 V7.1 and earlier (All versions), OpenPCS 7 V8.0 (All versions), OpenPCS 7 V8.1 (All versions < V8.1 Upd5), OpenPCS 7 V8.2 (All versions), OpenPCS 7 V9.0 (All versions < V9.0 Upd1), SIMATIC BATCH V7.1 and earlier (All versions

CVSS
— —
EPSS
0.43% (top 37.60%)
CWE
CWE-20
Published
2018-04-24T17:00:00.000Z
Last modified
2024-08-05T05:18:26.633Z
CVSS vector
—

01What is this vulnerability?

A vulnerability has been identified in OpenPCS 7 V7.1 and earlier (All versions), OpenPCS 7 V8.0 (All versions), OpenPCS 7 V8.1 (All versions < V8.1 Upd5), OpenPCS 7 V8.2 (All versions), OpenPCS 7 V9.0 (All versions < V9.0 Upd1), SIMATIC BATCH V7.1 and earlier (All versions), SIMATIC BATCH V8.0 (All versions < V8.0 SP1 Upd21), SIMATIC BATCH V8.1 (All versions < V8.1 SP1 Upd16), SIMATIC BATCH V8.2…

02Affected products

VendorProductVersions
SiemensOpenPCS 7 V7.1 and earlierAll versions
SiemensOpenPCS 7 V8.0All versions
SiemensOpenPCS 7 V8.1All versions < V8.1 Upd5
SiemensOpenPCS 7 V8.2All versions
SiemensOpenPCS 7 V9.0All versions < V9.0 Upd1
SiemensSIMATIC BATCH V7.1 and earlierAll versions
SiemensSIMATIC BATCH V8.0All versions < V8.0 SP1 Upd21
SiemensSIMATIC BATCH V8.1All versions < V8.1 SP1 Upd16
SiemensSIMATIC BATCH V8.2All versions < V8.2 Upd10
SiemensSIMATIC BATCH V9.0All versions < V9.0 SP1
SiemensSIMATIC NET PC Software V14All versions < V14 SP1 Update 14
SiemensSIMATIC NET PC Software V15All versions < 15 SP1
SiemensSIMATIC PCS 7 V7.1 and earlierAll versions
SiemensSIMATIC PCS 7 V8.0All versions
SiemensSIMATIC PCS 7 V8.1All versions
SiemensSIMATIC PCS 7 V8.2All versions < V8.2 SP1
SiemensSIMATIC PCS 7 V9.0All versions < V9.0 SP1
SiemensSIMATIC Route Control V7.1 and earlierAll versions
SiemensSIMATIC Route Control V8.0All versions
SiemensSIMATIC Route Control V8.1All versions
SiemensSIMATIC Route Control V8.2All versions
SiemensSIMATIC Route Control V9.0All versions < V9.0 Upd1
SiemensSIMATIC WinCC Runtime Professional V13All versions < V13 SP2 Upd2
SiemensSIMATIC WinCC Runtime Professional V14All versions < V14 SP1 Upd5
SiemensSIMATIC WinCC V7.2 and earlierAll versions < WinCC 7.2 Upd 15
SiemensSIMATIC WinCC V7.3All versions < WinCC 7.3 Upd 16
SiemensSIMATIC WinCC V7.4All versions < V7.4 SP1 Upd 4
SiemensSPPAT3000 Application Server — All versions < Service Pack R8.2 SP2

03Active exploitation status

Not currently listed on the CISA Known Exploited Vulnerabilities (KEV) catalog. EPSS is the best forward-looking signal — see the EPSS row above.

04Recommended remediation

05Technical details

For the full vendor write-up, exploit chains, and reference implementations, see the references list in section 09.

06Detection signatures

Ask SARA in chat to draft a starting detection for this CVE in your stack of choice.

07Related CVEs

No directly-cited follow-up CVEs in the KB record for this advisory. The references list in section 09 carries the vendor cross-references.

08Timeline

09References

Want this in your SOAR or SIEM?
SARA's API returns EPSS, CVSS, KEV, and an analyst-grade summary in one call.
Read the API reference →
EPSS detail → Search KEV → Ask SARA →