Read the docs
TI-2018-03409 Aliases CVE-2018-4832GHSA-gx8w-56ch-h8w4

Improper input validation in Siemens OpenPCS 7 V7.1 and earlier

Priority LOW 37CWE-20Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · None · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

A vulnerability has been identified in OpenPCS 7 V7.1 and earlier (All versions), OpenPCS 7 V8.0 (All versions), OpenPCS 7 V8.1 (All versions < V8.1 Upd5), OpenPCS 7 V8.2 (All versions), OpenPCS 7 V9.0 (All versions < V9.0 Upd1), SIMATIC BATCH V7.1 and earlier (All versions), SIMATIC BATCH V8.0 (All versions < V8.0 SP1 Upd21), SIMATIC BATCH V8.1 (All versions < V8.1 SP1 Upd16), SIMATIC BATCH V8.2 (All versions < V8.2 Upd10), SIMATIC BATCH V9.0 (All versions < V9.0 SP1), SIMATIC NET PC Software V14 (All versions < V14 SP1 Update 14), SIMATIC NET PC Software V15 (All versions < 15 SP1), SIMATIC PCS 7 V7.1 and earlier (All versions), SIMATIC PCS 7 V8.0 (All versions), SIMATIC PCS 7 V8.1 (All versions), SIMATIC PCS 7 V8.2 (All versions < V8.2 SP1), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP1), SIMATIC Route Control V7.1 and earlier (All versions), SIMATIC Route Control V8.0 (All versions), SIMATIC Route Control V8.1 (All versions), SIMATIC Route Control V8.2 (All versions), SIMATIC Route Control V9.0 (All versions < V9.0 Upd1), SIMATIC WinCC Runtime Professional V13 (All versions < V13 SP2 Upd2), SIMATIC WinCC Runtime Professional V14 (All versions < V14 SP1 Upd5), SIMATIC WinCC V7.2 and earlier (All versions < WinCC 7.2 Upd 15), SIMATIC WinCC V7.3 (All versions < WinCC 7.3 Upd 16), SIMATIC WinCC V7.4 (All versions < V7.4 SP1 Upd 4), SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). Specially crafted messages sent to the RPC service of the affected products could cause a Denial-of-Service condition on the remote and local communication functionality of the affected products. A reboot of the system is required to recover the remote and local communication functionality. Please note that an attacker needs to have network access to the Application Server in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.

Why it matters now

EPSS 0.0242 84th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
SiemensOpenPCS 7 V7.1 and earlierAll versions—No fix listedCNA
SiemensOpenPCS 7 V8.0All versions—No fix listedCNA
SiemensOpenPCS 7 V8.1All versions < V8.1 Upd5—No fix listedCNA
SiemensOpenPCS 7 V8.2All versions—No fix listedCNA
SiemensOpenPCS 7 V9.0All versions < V9.0 Upd1—No fix listedCNA
SiemensSIMATIC BATCH V7.1 and earlierAll versions—No fix listedCNA
SiemensSIMATIC BATCH V8.0All versions < V8.0 SP1 Upd21—No fix listedCNA
SiemensSIMATIC BATCH V8.1All versions < V8.1 SP1 Upd16—No fix listedCNA
SiemensSIMATIC BATCH V8.2All versions < V8.2 Upd10—No fix listedCNA
SiemensSIMATIC BATCH V9.0All versions < V9.0 SP1—No fix listedCNA
SiemensSIMATIC NET PC Software V14All versions < V14 SP1 Update 14—No fix listedCNA
SiemensSIMATIC NET PC Software V15All versions < 15 SP1—No fix listedCNA
SiemensSIMATIC PCS 7 V7.1 and earlierAll versions—No fix listedCNA
SiemensSIMATIC PCS 7 V8.0All versions—No fix listedCNA
SiemensSIMATIC PCS 7 V8.1All versions—No fix listedCNA
SiemensSIMATIC PCS 7 V8.2All versions < V8.2 SP1—No fix listedCNA
SiemensSIMATIC PCS 7 V9.0All versions < V9.0 SP1—No fix listedCNA
SiemensSIMATIC Route Control V7.1 and earlierAll versions—No fix listedCNA
SiemensSIMATIC Route Control V8.0All versions—No fix listedCNA
SiemensSIMATIC Route Control V8.1All versions—No fix listedCNA
SiemensSIMATIC Route Control V8.2All versions—No fix listedCNA
SiemensSIMATIC Route Control V9.0All versions < V9.0 Upd1—No fix listedCNA
SiemensSIMATIC WinCC Runtime Professional V13All versions < V13 SP2 Upd2—No fix listedCNA
SiemensSIMATIC WinCC Runtime Professional V14All versions < V14 SP1 Upd5—No fix listedCNA
SiemensSIMATIC WinCC V7.2 and earlierAll versions < WinCC 7.2 Upd 15—No fix listedCNA
SiemensSIMATIC WinCC V7.3All versions < WinCC 7.3 Upd 16—No fix listedCNA
SiemensSIMATIC WinCC V7.4All versions < V7.4 SP1 Upd 4—No fix listedCNA
SiemensSPPA-T3000 Application ServerAll versions < Service Pack R8.2 SP2—No fix listedCNA
  • OpenPCS 7 V7.1 and earlier VendorSiemens Affected All versions Fixed in — No fix listed CNA
  • OpenPCS 7 V8.0 VendorSiemens Affected All versions Fixed in — No fix listed CNA
  • OpenPCS 7 V8.1 VendorSiemens Affected All versions < V8.1 Upd5 Fixed in — No fix listed CNA
  • OpenPCS 7 V8.2 VendorSiemens Affected All versions Fixed in — No fix listed CNA
  • OpenPCS 7 V9.0 VendorSiemens Affected All versions < V9.0 Upd1 Fixed in — No fix listed CNA
  • SIMATIC BATCH V7.1 and earlier VendorSiemens Affected All versions Fixed in — No fix listed CNA
  • SIMATIC BATCH V8.0 VendorSiemens Affected All versions < V8.0 SP1 Upd21 Fixed in — No fix listed CNA
  • SIMATIC BATCH V8.1 VendorSiemens Affected All versions < V8.1 SP1 Upd16 Fixed in — No fix listed CNA
  • SIMATIC BATCH V8.2 VendorSiemens Affected All versions < V8.2 Upd10 Fixed in — No fix listed CNA
  • SIMATIC BATCH V9.0 VendorSiemens Affected All versions < V9.0 SP1 Fixed in — No fix listed CNA
  • SIMATIC NET PC Software V14 VendorSiemens Affected All versions < V14 SP1 Update 14 Fixed in — No fix listed CNA
  • SIMATIC NET PC Software V15 VendorSiemens Affected All versions < 15 SP1 Fixed in — No fix listed CNA
  • SIMATIC PCS 7 V7.1 and earlier VendorSiemens Affected All versions Fixed in — No fix listed CNA
  • SIMATIC PCS 7 V8.0 VendorSiemens Affected All versions Fixed in — No fix listed CNA
  • SIMATIC PCS 7 V8.1 VendorSiemens Affected All versions Fixed in — No fix listed CNA
  • SIMATIC PCS 7 V8.2 VendorSiemens Affected All versions < V8.2 SP1 Fixed in — No fix listed CNA
  • SIMATIC PCS 7 V9.0 VendorSiemens Affected All versions < V9.0 SP1 Fixed in — No fix listed CNA
  • SIMATIC Route Control V7.1 and earlier VendorSiemens Affected All versions Fixed in — No fix listed CNA
  • SIMATIC Route Control V8.0 VendorSiemens Affected All versions Fixed in — No fix listed CNA
  • SIMATIC Route Control V8.1 VendorSiemens Affected All versions Fixed in — No fix listed CNA
  • SIMATIC Route Control V8.2 VendorSiemens Affected All versions Fixed in — No fix listed CNA
  • SIMATIC Route Control V9.0 VendorSiemens Affected All versions < V9.0 Upd1 Fixed in — No fix listed CNA
  • SIMATIC WinCC Runtime Professional V13 VendorSiemens Affected All versions < V13 SP2 Upd2 Fixed in — No fix listed CNA
  • SIMATIC WinCC Runtime Professional V14 VendorSiemens Affected All versions < V14 SP1 Upd5 Fixed in — No fix listed CNA
  • SIMATIC WinCC V7.2 and earlier VendorSiemens Affected All versions < WinCC 7.2 Upd 15 Fixed in — No fix listed CNA
  • SIMATIC WinCC V7.3 VendorSiemens Affected All versions < WinCC 7.3 Upd 16 Fixed in — No fix listed CNA
  • SIMATIC WinCC V7.4 VendorSiemens Affected All versions < V7.4 SP1 Upd 4 Fixed in — No fix listed CNA
  • SPPA-T3000 Application Server VendorSiemens Affected All versions < Service Pack R8.2 SP2 Fixed in — No fix listed CNA

CPE configurations NVD · 46

CPEVersionsRoleVendor
cpe:2.3:a:siemens:openpcs_7:*:*:*:*:*:*:*:*up to 7.1VulnerableSiemens
cpe:2.3:a:siemens:openpcs_7:8.0:*:*:*:*:*:*:*8.0VulnerableSiemens
cpe:2.3:a:siemens:openpcs_7:8.1:-:*:*:*:*:*:*8.1VulnerableSiemens
cpe:2.3:a:siemens:openpcs_7:8.1:upd_1:*:*:*:*:*:*8.1 upd_1VulnerableSiemens
cpe:2.3:a:siemens:openpcs_7:8.1:upd_2:*:*:*:*:*:*8.1 upd_2VulnerableSiemens
cpe:2.3:a:siemens:openpcs_7:8.1:upd_3:*:*:*:*:*:*8.1 upd_3VulnerableSiemens
cpe:2.3:a:siemens:openpcs_7:8.1:upd_4:*:*:*:*:*:*8.1 upd_4VulnerableSiemens
cpe:2.3:a:siemens:openpcs_7:8.2:*:*:*:*:*:*:*8.2VulnerableSiemens
cpe:2.3:a:siemens:openpcs_7:9.0:*:*:*:*:*:*:*9.0VulnerableSiemens
cpe:2.3:a:siemens:simatic_batch:7.1:*:*:*:*:*:*:*7.1VulnerableSiemens
  • cpe:2.3:a:siemens:openpcs_7:*:*:*:*:*:*:*:* Versions up to 7.1 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:openpcs_7:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:openpcs_7:8.1:-:*:*:*:*:*:* Versions 8.1 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:openpcs_7:8.1:upd_1:*:*:*:*:*:* Versions 8.1 upd_1 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:openpcs_7:8.1:upd_2:*:*:*:*:*:* Versions 8.1 upd_2 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:openpcs_7:8.1:upd_3:*:*:*:*:*:* Versions 8.1 upd_3 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:openpcs_7:8.1:upd_4:*:*:*:*:*:* Versions 8.1 upd_4 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:openpcs_7:8.2:*:*:*:*:*:*:* Versions 8.2 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:openpcs_7:9.0:*:*:*:*:*:*:* Versions 9.0 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_batch:7.1:*:*:*:*:*:*:* Versions 7.1 Vulnerable ·Siemens
Show 36 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:siemens:simatic_batch:8.0:-:*:*:*:*:*:*8.0VulnerableSiemens
cpe:2.3:a:siemens:simatic_batch:8.0:sp1_upd20:*:*:*:*:*:*8.0 sp1_upd20VulnerableSiemens
cpe:2.3:a:siemens:simatic_batch:8.1:-:*:*:*:*:*:*8.1VulnerableSiemens
cpe:2.3:a:siemens:simatic_batch:8.1:sp1_upd14:*:*:*:*:*:*8.1 sp1_upd14VulnerableSiemens
cpe:2.3:a:siemens:simatic_batch:8.1:sp1_upd15:*:*:*:*:*:*8.1 sp1_upd15VulnerableSiemens
cpe:2.3:a:siemens:simatic_batch:8.2:-:*:*:*:*:*:*8.2VulnerableSiemens
cpe:2.3:a:siemens:simatic_batch:8.2:upd_9:*:*:*:*:*:*8.2 upd_9VulnerableSiemens
cpe:2.3:a:siemens:simatic_batch:9.0:*:*:*:*:*:*:*9.0VulnerableSiemens
cpe:2.3:a:siemens:simatic_net_pc:*:*:*:*:*:*:*:*before 15VulnerableSiemens
cpe:2.3:a:siemens:simatic_net_pc:15:-:*:*:*:*:*:*15VulnerableSiemens
cpe:2.3:a:siemens:simatic_pcs_7:*:*:*:*:*:*:*:*up to 7.1VulnerableSiemens
cpe:2.3:a:siemens:simatic_pcs_7:8.0:*:*:*:*:*:*:*8.0VulnerableSiemens
cpe:2.3:a:siemens:simatic_pcs_7:8.1:*:*:*:*:*:*:*8.1VulnerableSiemens
cpe:2.3:a:siemens:simatic_pcs_7:8.2:-:*:*:*:*:*:*8.2VulnerableSiemens
cpe:2.3:a:siemens:simatic_pcs_7:9.0:-:*:*:*:*:*:*9.0VulnerableSiemens
cpe:2.3:a:siemens:simatic_route_control:*:*:*:*:*:*:*:*up to 7.1VulnerableSiemens
cpe:2.3:a:siemens:simatic_route_control:8.0:*:*:*:*:*:*:*8.0VulnerableSiemens
cpe:2.3:a:siemens:simatic_route_control:8.1:*:*:*:*:*:*:*8.1VulnerableSiemens
cpe:2.3:a:siemens:simatic_route_control:9.0:-:*:*:*:*:*:*9.0VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc_runtime_professional:*:*:*:*:*:*:*:*before 13VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc_runtime_professional:13:-:*:*:*:*:*:*13VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc_runtime_professional:13:sp2_upd_1:*:*:*:*:*:*13 sp2_upd_1VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc_runtime_professional:14:-:*:*:*:*:*:*14VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc_runtime_professional:14:sp1_upd_4:*:*:*:*:*:*14 sp1_upd_4VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:*:*:*:*:*:*:*:*before 7.2VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:7.2:-:*:*:*:*:*:*7.2VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:7.2:upd_14:*:*:*:*:*:*7.2 upd_14VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:7.3:-:*:*:*:*:*:*7.3VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:7.3:upd_15:*:*:*:*:*:*7.3 upd_15VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:7.4:-:*:*:*:*:*:*7.4VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:7.4:sp1:*:*:*:*:*:*7.4 sp1VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_upd_3:*:*:*:*:*:*7.4 sp1_upd_3VulnerableSiemens
cpe:2.3:a:siemens:sppa-t3000_application_server:*:*:*:*:*:*:*:*before r8.2VulnerableSiemens
cpe:2.3:a:siemens:sppa-t3000_application_server:r8.2:-:*:*:*:*:*:*r8.2VulnerableSiemens
cpe:2.3:a:siemens:sppa-t3000_application_server:r8.2:sp1:*:*:*:*:*:*r8.2 sp1VulnerableSiemens
cpe:2.3:a:siemens:simatic_net_pc_software:*:*:*:*:*:*:*:*before 14.0VulnerableSiemens
  • cpe:2.3:a:siemens:simatic_batch:8.0:-:*:*:*:*:*:* Versions 8.0 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_batch:8.0:sp1_upd20:*:*:*:*:*:* Versions 8.0 sp1_upd20 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_batch:8.1:-:*:*:*:*:*:* Versions 8.1 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_batch:8.1:sp1_upd14:*:*:*:*:*:* Versions 8.1 sp1_upd14 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_batch:8.1:sp1_upd15:*:*:*:*:*:* Versions 8.1 sp1_upd15 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_batch:8.2:-:*:*:*:*:*:* Versions 8.2 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_batch:8.2:upd_9:*:*:*:*:*:* Versions 8.2 upd_9 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_batch:9.0:*:*:*:*:*:*:* Versions 9.0 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_net_pc:*:*:*:*:*:*:*:* Versions before 15 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_net_pc:15:-:*:*:*:*:*:* Versions 15 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_pcs_7:*:*:*:*:*:*:*:* Versions up to 7.1 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_pcs_7:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_pcs_7:8.1:*:*:*:*:*:*:* Versions 8.1 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_pcs_7:8.2:-:*:*:*:*:*:* Versions 8.2 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_pcs_7:9.0:-:*:*:*:*:*:* Versions 9.0 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_route_control:*:*:*:*:*:*:*:* Versions up to 7.1 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_route_control:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_route_control:8.1:*:*:*:*:*:*:* Versions 8.1 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_route_control:9.0:-:*:*:*:*:*:* Versions 9.0 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc_runtime_professional:*:*:*:*:*:*:*:* Versions before 13 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc_runtime_professional:13:-:*:*:*:*:*:* Versions 13 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc_runtime_professional:13:sp2_upd_1:*:*:*:*:*:* Versions 13 sp2_upd_1 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc_runtime_professional:14:-:*:*:*:*:*:* Versions 14 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc_runtime_professional:14:sp1_upd_4:*:*:*:*:*:* Versions 14 sp1_upd_4 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:*:*:*:*:*:*:*:* Versions before 7.2 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:7.2:-:*:*:*:*:*:* Versions 7.2 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:7.2:upd_14:*:*:*:*:*:* Versions 7.2 upd_14 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:7.3:-:*:*:*:*:*:* Versions 7.3 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:7.3:upd_15:*:*:*:*:*:* Versions 7.3 upd_15 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:7.4:-:*:*:*:*:*:* Versions 7.4 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:7.4:sp1:*:*:*:*:*:* Versions 7.4 sp1 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_upd_3:*:*:*:*:*:* Versions 7.4 sp1_upd_3 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:sppa-t3000_application_server:*:*:*:*:*:*:*:* Versions before r8.2 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:sppa-t3000_application_server:r8.2:-:*:*:*:*:*:* Versions r8.2 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:sppa-t3000_application_server:r8.2:sp1:*:*:*:*:*:* Versions r8.2 sp1 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_net_pc_software:*:*:*:*:*:*:*:* Versions before 14.0 Vulnerable ·Siemens

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2018-4832
  2. 2026-10-03 Alias added: GHSA-gx8w-56ch-h8w4

References

Advisory 3

  • TI-2019-13902 A vulnerability has been identified in OpenPCS 7 V8.1 (All versions), OpenPCS 7 V8.2 (All… CVSS 3.1HIGH 7.5
  • TI-2023-26225 NULL pointer dereference in Siemens OpenPCS 7 V9.1 CVSS 4.0HIGH 7.1
  • TI-2023-26224 NULL pointer dereference in Siemens OpenPCS 7 V9.1 CVSS 4.0HIGH 7.1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences