ICSA-18-347-02 | Vulnetix

ICSA-18-347-02 PUBLISHED CVSS 5.900000095367432 MEDIUM

Record from circl · Published December 13, 2018

Successful exploitation of these vulnerabilities could cause a denial-of-service condition of the network functionality of the device, compromising the availability of the system.

Risk scores

CVSS 3.1

5.900000095367432

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C

Affected products

Vendor	Product	Versions
	SIPROTEC 5 relays with CPU variants CP200 and the respective Ethernet: All versions < V7.58
	SIPROTEC 5 relays with CPU variants CP300 and CP100 and the respective: All versions < V7.80
	Firmware variant IEC 61850 for EN100 Ethernet module: All versions < V4.33
	Firmware variant IEC104 for EN100 Ethernet module: All versions < V1.22
	Firmware variant PROFINET IO for EN100 Ethernet module: All versions
	Firmware variant DNP3 TCP for EN100 Ethernet module: All versions
	Firmware variant Modbus TCP for EN100 Ethernet module: All versions

Timeline

Dec 13, 2018 CVE Published
Feb 12, 2019 CVE Updated

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln ICSA-18-347-02
vulnetix vdb fixes ICSA-18-347-02

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/ICSA-18-347-02/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Look up in the Resolve Platform →