CVE-2018-13808

CRITICAL

Siemens CP 1604 and CP 1616 Firmware - Exposure of Sensitive Information and Denial of Service via Telnet Port

Title source: llm
STIX 2.1

Description

A vulnerability has been identified in CP 1604 (All versions), CP 1616 (All versions). An attacker with network access to port 23/tcp could extract internal communication data or cause a Denial-of-Service condition. Successful exploitation requires network access to a vulnerable device. At the time of advisory publication no public exploitation of this vulnerability was known.

References (1)

Core 1
Core References

Scores

CVSS v3 9.1
EPSS 0.0057
EPSS Percentile 68.7%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Details

CWE
CWE-200
Status published
Products (2)
siemens/cp_1604_firmware < 2.8
siemens/cp_1616_firmware < 2.8
Published Apr 17, 2019
Tracked Since Feb 18, 2026