[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fQiyWL1lFTBBREHMo4kcHKRhIblCPbdI3HyGuZrxP8AU":3,"g5a-risk:CVE-2018-11459":185},{"success":4,"data":5,"meta":183},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":38,"epssPercentile":15,"epssTimeSeries":39,"severity":41,"affectedProducts":42,"affectedProductsCount":37,"references":76,"referencesCount":88,"weaknesses":89,"weaknessesCount":98,"isActivelyExploited":99,"cisaInfo":15,"otxData":15,"relatedBlogPosts":100,"seoMetadata":101,"configurations":126,"relatedVendorCves":181,"notableEvents":182},"CVE-2018-11459","What is CVE-2018-11459?","A vulnerability has been identified in SINUMERIK 808D V4.7 (All versions), SINUMERIK 808D V4.8 (All versions), SINUMERIK 828D V4.7 (All versions \u003C V4.7 SP6 HF1), SINUMERIK 840D sl V4.7 (All versions \u003C V4.7 SP6 HF5), SINUMERIK 840D sl V4.8 (All versions \u003C V4.8 SP3). A local attacker could modify a user-writeable configuration file so that after reboot or manual initiation the system reloads the modified configuration file and attacker-controlled code is executed with elevated privileges. The security vulnerability could be exploited by an attacker with local access to the affected system. Successful exploitation requires user privileges but no user interaction. The vulnerability could allow an attacker to compromise confidentiality, integrity and availability of the system. At the time of advisory publication no public exploitation of this security vulnerability was known.","A vulnerability has been identified in SINUMERIK 808D V4.7 (All versions), SINUMERIK 808D V4.8 (All versions), SINUMERIK 828D V4.7 (All versions \u003C V4.7 SP6 H...","2018-12-12T16:29:00.357","2019-10-09T23:33:33.01",7.8,"CVSS:3.0\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":29,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","LOCAL","LOW","NONE","UNCHANGED","HIGH",1.8,5.9,[30],{"Source":18,"Type":19,"CVSSData":31,"BaseSeverity":26,"ExploitabilityScore":36,"ImpactScore":37,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":32,"VectorString":33,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":34,"IntegrityImpact":34,"AvailabilityImpact":34,"BaseScore":35,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:L\u002FAC:L\u002FAu:N\u002FC:C\u002FI:C\u002FA:C","COMPLETE",7.2,3.9,10,0.00375,[40,40,40,40,40,38,38],0.00378,"High",[43,48,52,55,58,61,64,67,70,73],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"siemens","sinumerik_808d_v4.7_firmware","*","cpe:2.3:o:siemens:sinumerik_808d_v4.7_firmware:*:*:*:*:*:*:*:*",{"vendor":44,"product":49,"version":50,"criteria":51,"vulnerable":4},"sinumerik_808d_v4.7","-","cpe:2.3:h:siemens:sinumerik_808d_v4.7:-:*:*:*:*:*:*:*",{"vendor":44,"product":53,"version":46,"criteria":54,"vulnerable":4},"sinumerik_808d_v4.8_firmware","cpe:2.3:o:siemens:sinumerik_808d_v4.8_firmware:*:*:*:*:*:*:*:*",{"vendor":44,"product":56,"version":50,"criteria":57,"vulnerable":4},"sinumerik_808d_v4.8","cpe:2.3:h:siemens:sinumerik_808d_v4.8:-:*:*:*:*:*:*:*",{"vendor":44,"product":59,"version":46,"criteria":60,"vulnerable":4},"sinumerik_828d_v4.7_firmware","cpe:2.3:o:siemens:sinumerik_828d_v4.7_firmware:*:*:*:*:*:*:*:*",{"vendor":44,"product":62,"version":50,"criteria":63,"vulnerable":4},"sinumerik_828d_v4.7","cpe:2.3:h:siemens:sinumerik_828d_v4.7:-:*:*:*:*:*:*:*",{"vendor":44,"product":65,"version":46,"criteria":66,"vulnerable":4},"sinumerik_840d_sl_v4.7_firmware","cpe:2.3:o:siemens:sinumerik_840d_sl_v4.7_firmware:*:*:*:*:*:*:*:*",{"vendor":44,"product":68,"version":46,"criteria":69,"vulnerable":4},"sinumerik_840d_sl_v4.7","cpe:2.3:h:siemens:sinumerik_840d_sl_v4.7:*:*:*:*:*:*:*:*",{"vendor":44,"product":71,"version":46,"criteria":72,"vulnerable":4},"sinumerik_840d_sl_v4.8_firmware","cpe:2.3:o:siemens:sinumerik_840d_sl_v4.8_firmware:*:*:*:*:*:*:*:*",{"vendor":44,"product":74,"version":50,"criteria":75,"vulnerable":4},"sinumerik_840d_sl_v4.8","cpe:2.3:h:siemens:sinumerik_840d_sl_v4.8:-:*:*:*:*:*:*:*",[77,83],{"url":78,"source":79,"tags":80},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F106185","Securityfocus",[81,82],"Third Party Advisory","VDB Entry",{"url":84,"source":85,"tags":86},"https:\u002F\u002Fcert-portal.siemens.com\u002Fproductcert\u002Fpdf\u002Fssa-170881.pdf","Siemens",[87],"Vendor Advisory",2,[90],{"id":91,"name":92,"description":93,"extendedDescription":94,"status":95,"abstraction":96,"structure":97},"CWE-693","Protection Mechanism Failure","The product does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.","This weakness covers three distinct situations. A \"missing\" protection mechanism occurs when the application does not define any mechanism against a certain class of attack. An \"insufficient\" protection mechanism might provide some defenses - for example, against the most common attacks - but it does not protect against everything that is intended. Finally, an \"ignored\" mechanism occurs when a mechanism is available and in active use within the product, but the developer has not applied it in some code path.","Draft","Pillar","Simple",1,false,[],{"title":102,"metaDescription":103,"keywords":104,"canonicalUrl":105,"structuredData":106},"What is CVE-2018-11459? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2018-11459, a high severity cyber security vulnerability from 2018. A vulnerability has been identified in SINUMERIK 808D V4.7 ...","CVE-2018-11459, CVE-2018-11459 vulnerability, CVE-2018-11459 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, siemens security, sinumerik_808d_v4.7_firmware vulnerability, sinumerik_808d_v4.7 vulnerability, sinumerik_808d_v4.8_firmware vulnerability, sinumerik_808d_v4.8 vulnerability, sinumerik_828d_v4.7_firmware vulnerability","\u002Fwhat-is\u002Fcve-2018-11459",{"@context":107,"@type":108,"headline":102,"description":103,"datePublished":10,"dateModified":11,"author":109,"publisher":113,"about":117,"mainEntityOfPage":121,"articleSection":124,"keywords":125},"https:\u002F\u002Fschema.org","TechArticle",{"@type":110,"name":111,"url":112},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":110,"name":111,"url":112,"logo":114},{"@type":115,"url":116},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":118,"name":6,"description":119,"additionalType":120},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":122,"@id":123},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2018-11459","Cybersecurity","CVE-2018-11459, CVE-2018-11459 vulnerability, CVE-2018-11459 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[127,139,149,160,170],{"Operator":128,"Negate":15,"Nodes":129},"AND",[130,135],{"Operator":131,"Negate":15,"CPEMatch":132},"OR",[133],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":134,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"C3A4ADF0-33D6-49AA-9F17-594FB2405188",{"Operator":131,"Negate":15,"CPEMatch":136},[137],{"Vulnerable":15,"Criteria":51,"MatchCriteriaID":138,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"C5B5C872-3E63-4696-BCEB-A4D236EC2B09",{"Operator":128,"Negate":15,"Nodes":140},[141,145],{"Operator":131,"Negate":15,"CPEMatch":142},[143],{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":144,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"9A6EFCCC-87AB-4E71-93D7-206EF6E57AE8",{"Operator":131,"Negate":15,"CPEMatch":146},[147],{"Vulnerable":15,"Criteria":57,"MatchCriteriaID":148,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"728CA45F-CE23-4EB8-810F-5292ACFD3D62",{"Operator":128,"Negate":15,"Nodes":150},[151,156],{"Operator":131,"Negate":15,"CPEMatch":152},[153],{"Vulnerable":4,"Criteria":60,"MatchCriteriaID":154,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":155},"96A87A16-2670-4751-8B62-9C7ACE6BC705","4.7",{"Operator":131,"Negate":15,"CPEMatch":157},[158],{"Vulnerable":15,"Criteria":63,"MatchCriteriaID":159,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"B5F8425A-13F1-404C-9BF2-E9259BFE9BED",{"Operator":128,"Negate":15,"Nodes":161},[162,166],{"Operator":131,"Negate":15,"CPEMatch":163},[164],{"Vulnerable":4,"Criteria":66,"MatchCriteriaID":165,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":155},"061BC154-7411-4982-B9F8-9A1873099EC5",{"Operator":131,"Negate":15,"CPEMatch":167},[168],{"Vulnerable":15,"Criteria":69,"MatchCriteriaID":169,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"40B6E241-2FA0-45E0-B64D-F7F41746FF78",{"Operator":128,"Negate":15,"Nodes":171},[172,177],{"Operator":131,"Negate":15,"CPEMatch":173},[174],{"Vulnerable":4,"Criteria":72,"MatchCriteriaID":175,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":176},"C4E14591-E3AA-4177-814E-3FB4C8F15590","4.8",{"Operator":131,"Negate":15,"CPEMatch":178},[179],{"Vulnerable":15,"Criteria":75,"MatchCriteriaID":180,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"1F75930F-4085-4A41-BCB6-930ADB8F0C32",[],[],{"lastModified":11,"cacheTime":184,"version":32},1792361842306,{"score":186,"band":187,"action":188,"scoredAt":189},46,"Medium","Plan remediation","2026-10-16T06:45:14.87512+00:00"]