Read the docs
TI-2018-11878 Aliases CVE-2018-16558GHSA-fc72-f69r-qvh3

Improper input validation in Siemens SIMATIC S7-1500 CPU

Priority LOW 37CWE-20Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · None · High
Fix status
No fix listed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA.

Summary

A vulnerability has been identified in SIMATIC S7-1500 CPU (All versions >= V2.0 and < V2.5), SIMATIC S7-1500 CPU (All versions <= V1.8.5). Specially crafted network packets sent to port 80/tcp or 443/tcp could allow an unauthenticated remote attacker to cause a Denial-of-Service condition of the device. The security vulnerability could be exploited by an attacker with network access to the affected systems on port 80/tcp or 443/tcp. Successful exploitation requires no system privileges and no user interaction. An attacker could use the vulnerability to compromise availability of the device. At the time of advisory publication no public exploitation of this security vulnerability was known.

Why it matters now

EPSS 0.01986 80th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
SiemensSIMATIC S7-1500 CPUAll versions >= V2.0 and < V2.5—No fix listedCNA
SiemensSIMATIC S7-1500 CPUup to V1.8.5—No fix listedCNA
  • SIMATIC S7-1500 CPU VendorSiemens Affected All versions >= V2.0 and < V2.5 Fixed in — No fix listed CNA
  • SIMATIC S7-1500 CPU VendorSiemens Affected up to V1.8.5 Fixed in — No fix listed CNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:o:siemens:simatic_s7-1500_firmware:*:*:*:*:*:*:*:*up to 1.8.5; 2.0 to before 2.5VulnerableSiemens
cpe:2.3:h:siemens:simatic_s7-1500:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
  • cpe:2.3:o:siemens:simatic_s7-1500_firmware:*:*:*:*:*:*:*:* Versions up to 1.8.5; 2.0 to before 2.5 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:simatic_s7-1500:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2018-16558
  2. 2026-10-03 Alias added: GHSA-fc72-f69r-qvh3

References

Advisory 1

  • TI-2014-00154 The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly… KEVCVSS 3.1HIGH 7.5
  • TI-2018-02664 Observable discrepancy in Intel Multiple CVSS 3.1MEDIUM 5.5
  • TI-2017-09446 Uncontrolled resource consumption in Siemens Development/Evaluation Kits for PROFINET IO… CVSS 4.0HIGH 8.7
  • TI-2019-04628 Improper handling of exceptional conditions in Siemens SIMATIC CP 443-1 OPC UA CVSS 3.1HIGH 7.5
  • TI-2019-04622 Out-of-bounds read in Siemens SIMATIC CP 1604 CVSS 3.1HIGH 7.5
  • TI-2018-11879 Improper input validation in Siemens SIMATIC S7-1500 CPU CVSS 3.0HIGH 7.5
See all 12 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences