[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f_QNEj3DU8EL4d49iINrtlZj3U8uqfeAdnblD7S-e2Os":3,"g5a-risk:CVE-2018-4847":117},{"success":4,"data":5,"meta":115},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":15,"epssTimeSeries":41,"severity":42,"affectedProducts":43,"affectedProductsCount":49,"references":50,"referencesCount":62,"weaknesses":63,"weaknessesCount":62,"isActivelyExploited":78,"cisaInfo":15,"otxData":15,"relatedBlogPosts":79,"seoMetadata":80,"configurations":105,"relatedVendorCves":113,"notableEvents":114},"CVE-2018-4847","What is CVE-2018-4847?","A vulnerability has been identified in SIMATIC WinCC OA Operator iOS App (All versions \u003C V1.4). Insufficient protection of sensitive information (e.g. session key for accessing server) in Siemens WinCC OA Operator iOS app could allow an attacker with physical access to the mobile device to read unencrypted data from the app's directory. Siemens provides mitigations to resolve the security issue.","A vulnerability has been identified in SIMATIC WinCC OA Operator iOS App (All versions \u003C V1.4). Insufficient protection of sensitive information (e.g. sessio...","2018-04-23T16:29:00.213","2019-10-03T00:03:26.223",4.6,"CVSS:3.0\u002FAV:P\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":30,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","PHYSICAL","LOW","NONE","UNCHANGED","HIGH","MEDIUM",0.9,3.6,[31],{"Source":18,"Type":19,"CVSSData":32,"BaseSeverity":23,"ExploitabilityScore":38,"ImpactScore":39,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":33,"VectorString":34,"AccessVector":35,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":36,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":37,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:L\u002FAC:L\u002FAu:N\u002FC:P\u002FI:N\u002FA:N","LOCAL","PARTIAL",2.1,3.9,2.9,0.00261,[40,40,40,40,40,40,40],"Medium",[44],{"vendor":45,"product":46,"version":47,"criteria":48,"vulnerable":4},"siemens","simatic_wincc_oa_operator","-","cpe:2.3:a:siemens:simatic_wincc_oa_operator:-:*:*:*:*:iphone_os:*:*",1,[51,57],{"url":52,"source":53,"tags":54},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F103941","Securityfocus",[55,56],"Third Party Advisory","VDB Entry",{"url":58,"source":59,"tags":60},"https:\u002F\u002Fcert-portal.siemens.com\u002Fproductcert\u002Fpdf\u002Fssa-597741.pdf","Siemens",[61],"Vendor Advisory",2,[64,72],{"id":65,"name":66,"description":67,"extendedDescription":68,"status":69,"abstraction":70,"structure":71},"CWE-311","Missing Encryption of Sensitive Data","The product does not encrypt sensitive or critical information before storage or transmission.","The lack of proper data encryption passes up the guarantees of confidentiality, integrity, and accountability that properly implemented encryption conveys.","Draft","Class","Simple",{"id":73,"name":74,"description":75,"extendedDescription":76,"status":69,"abstraction":77,"structure":71},"CWE-538","Insertion of Sensitive Information into Externally-Accessible File or Directory","The product places sensitive information into files or directories that are accessible to actors who are allowed to have access to the files, but not to the sensitive information.","","Base",false,[],{"title":81,"metaDescription":82,"keywords":83,"canonicalUrl":84,"structuredData":85},"What is CVE-2018-4847? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2018-4847, a medium severity cyber security vulnerability from 2018. A vulnerability has been identified in SIMATIC WinCC OA Op...","CVE-2018-4847, CVE-2018-4847 vulnerability, CVE-2018-4847 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, siemens security, simatic_wincc_oa_operator vulnerability","\u002Fwhat-is\u002Fcve-2018-4847",{"@context":86,"@type":87,"headline":81,"description":82,"datePublished":10,"dateModified":11,"author":88,"publisher":92,"about":96,"mainEntityOfPage":100,"articleSection":103,"keywords":104},"https:\u002F\u002Fschema.org","TechArticle",{"@type":89,"name":90,"url":91},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":89,"name":90,"url":91,"logo":93},{"@type":94,"url":95},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":97,"name":6,"description":98,"additionalType":99},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":101,"@id":102},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2018-4847","Cybersecurity","CVE-2018-4847, CVE-2018-4847 vulnerability, CVE-2018-4847 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[106],{"Operator":15,"Negate":15,"Nodes":107},[108],{"Operator":109,"Negate":15,"CPEMatch":110},"OR",[111],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":112,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"F933E902-9234-46ED-BA83-75B9286AB594",[],[],{"lastModified":11,"cacheTime":116,"version":33},1792352457340,{"score":118,"band":119,"action":120,"scoredAt":121},16,"Info","Track","2026-10-16T06:43:55.570822+00:00"]