CVE-2018-25112 — HIGH (7.5)

Vulnerability Description

An unauthenticated remote attacker may use an uncontrolled resource consumption in the IEC 61131 program of the affected products by creating large amounts of network traffic that needs to be handled by the ILC. This results in a Denial-of-Service of the device.

CVSS Score

7.5

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

NONE

Integrity

NONE

Availability

HIGH

Related Weaknesses (CWE)

CWE-770

References

https://certvde.com/en/advisories/VDE-2018-012/

FAQ

What is CVE-2018-25112?

CVE-2018-25112 is a vulnerability with a CVSS score of 7.5 (HIGH). An unauthenticated remote attacker may use an uncontrolled resource consumption in the IEC 61131 program of the affected products by creating large amounts of network traffic that needs to be handled ...

How severe is CVE-2018-25112?

CVE-2018-25112 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2018-25112?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.