Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
NVD Vulnerability Details :
CVE-2018-4846
Modified
More InfoOfficial Page
Source-productcert@siemens.com
View Known Exploited Vulnerability (KEV) details
Published At-26 Jun, 2018 | 18:29
Updated At-09 Oct, 2019 | 23:41

A vulnerability has been identified in RAPIDLab 1200 systems / RAPIDPoint 400 systems / RAPIDPoint 500 systems (All versions_without_ use of Siemens Healthineers Informatics products), RAPIDLab 1200 Series (All versions < V3.3 _with_ Siemens Healthineers Informatics products), RAPIDPoint 500 systems (All versions >= V3.0 _with_ Siemens Healthineers Informatics products), RAPIDPoint 500 systems (V2.4.X_with_ Siemens Healthineers Informatics products), RAPIDPoint 500 systems (All versions =< V2.3 _with_ Siemens Healthineers Informatics products), RAPIDPoint 400 systems (All versions _with_ Siemens Healthineers Informatics products). A factory account with hardcoded password might allow attackers access to the device over port 5900/tcp. Successful exploitation requires no user interaction or privileges and impacts the confidentiality, integrity, and availability of the affected device. At the time of advisory publication, no public exploitation of this security vulnerability is known. Siemens Healthineers confirms the security vulnerability and provides mitigations to resolve the security issue.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Metrics
TypeVersionBase scoreBase severityVector
Primary3.09.8CRITICAL
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary2.010.0HIGH
AV:N/AC:L/Au:N/C:C/I:C/A:C
CPE Matches

Siemens AG
siemens
>>rapidpoint_400_firmware>>-
cpe:2.3:o:siemens:rapidpoint_400_firmware:-:*:*:*:*:*:*:*
Siemens AG
siemens
>>rapidpoint_400>>-
cpe:2.3:h:siemens:rapidpoint_400:-:*:*:*:*:*:*:*
Siemens AG
siemens
>>rapidpoint_500_firmware>>Versions up to 2.3(inclusive)
cpe:2.3:o:siemens:rapidpoint_500_firmware:*:*:*:*:*:*:*:*
Siemens AG
siemens
>>rapidpoint_500_firmware>>Versions from 3.0(inclusive)
cpe:2.3:o:siemens:rapidpoint_500_firmware:*:*:*:*:*:*:*:*
Siemens AG
siemens
>>rapidpoint_500>>-
cpe:2.3:h:siemens:rapidpoint_500:-:*:*:*:*:*:*:*
Siemens AG
siemens
>>rapidlab_1200_firmware>>Versions before 3.3(exclusive)
cpe:2.3:o:siemens:rapidlab_1200_firmware:*:*:*:*:*:*:*:*
Siemens AG
siemens
>>rapidlab_1200>>-
cpe:2.3:h:siemens:rapidlab_1200:-:*:*:*:*:*:*:*
Weaknesses
CWE IDTypeSource
CWE-798Primarynvd@nist.gov
CWE-798Secondaryproductcert@siemens.com
Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References
HyperlinkSourceResource
https://cert-portal.siemens.com/productcert/pdf/ssa-755010.pdfproductcert@siemens.com
Third Party Advisory
Change History
0Changes found

Details not found