2018-08-07 - CVE Archive

CVE-2018-15132 Aug 07, 15:29 HIGH POC PATCH This Week

An issue was discovered in ext/standard/link_win32.c in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1.x before 7.1.20, and 7.2.x before 7.2.8. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

PHP Information Disclosure Microsoft Storage Automation Store Netapp

NVD GitHub

CVSS 3.0

7.5

EPSS

4.6%

CVE-2018-11455 Aug 07, 15:29 HIGH This Week

A vulnerability has been identified in Automation License Manager 5 (All versions < 5.3.4.4), Automation License Manager 6 (All versions < 6.0.1). Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Path Traversal Siemens Automation License Manager

NVD

CVSS 3.0

8.8

EPSS

5.3%

CVE-2018-11454 Aug 07, 15:29 HIGH This Week

A vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V10, V11, V12 (All versions), SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V13 (All versions < V13 SP2. Rated high severity (CVSS 8.6), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Privilege Escalation Siemens Simatic Step 7 Tia Portal Simatic Wincc Tia Portal

NVD

CVSS 3.0

8.6

EPSS

0.4%

CVE-2018-11453 Aug 07, 15:29 HIGH This Week

A vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V10, V11, V12 (All versions), SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V13 (All versions < V13 SP2. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation RCE Siemens Simatic Step 7 Tia Portal Simatic Wincc Tia Portal

NVD

CVSS 3.0

7.8

EPSS

0.4%