Headline
CVE-2018-4832
A vulnerability has been identified in OpenPCS 7 V7.1 and earlier (All versions), OpenPCS 7 V8.0 (All versions), OpenPCS 7 V8.1 (All versions < V8.1 Upd5), OpenPCS 7 V8.2 (All versions), OpenPCS 7 V9.0 (All versions < V9.0 Upd1), SIMATIC BATCH V7.1 and earlier (All versions), SIMATIC BATCH V8.0 (All versions < V8.0 SP1 Upd21), SIMATIC BATCH V8.1 (All versions < V8.1 SP1 Upd16), SIMATIC BATCH V8.2 (All versions < V8.2 Upd10), SIMATIC BATCH V9.0 (All versions < V9.0 SP1), SIMATIC NET PC Software V14 (All versions < V14 SP1 Update 14), SIMATIC NET PC Software V15 (All versions < 15 SP1), SIMATIC PCS 7 V7.1 and earlier (All versions), SIMATIC PCS 7 V8.0 (All versions), SIMATIC PCS 7 V8.1 (All versions), SIMATIC PCS 7 V8.2 (All versions < V8.2 SP1), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP1), SIMATIC Route Control V7.1 and earlier (All versions), SIMATIC Route Control V8.0 (All versions), SIMATIC Route Control V8.1 (All versions), SIMATIC Route Control V8.2 (All versions), SIMATIC Route Control V9.0 (All versions < V9.0 Upd1), SIMATIC WinCC Runtime Professional V13 (All versions < V13 SP2 Upd2), SIMATIC WinCC Runtime Professional V14 (All versions < V14 SP1 Upd5), SIMATIC WinCC V7.2 and earlier (All versions < WinCC 7.2 Upd 15), SIMATIC WinCC V7.3 (All versions < WinCC 7.3 Upd 16), SIMATIC WinCC V7.4 (All versions < V7.4 SP1 Upd 4), SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). Specially crafted messages sent to the RPC service of the affected products could cause a Denial-of-Service condition on the remote and local communication functionality of the affected products. A reboot of the system is required to recover the remote and local communication functionality. Please note that an attacker needs to have network access to the Application Server in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.
%PDF-1.5 %���� 1 0 obj << /D [2 0 R /XYZ 70.866 771.024 null] >> endobj 3 0 obj << /D [2 0 R /XYZ 70.866 613.09 null] >> endobj 4 0 obj << /D [2 0 R /XYZ 70.866 541.055 null] >> endobj 5 0 obj << /D [6 0 R /XYZ 70.866 251.191 null] >> endobj 7 0 obj << /D [6 0 R /XYZ 70.866 90.489 null] >> endobj 8 0 obj << /D [9 0 R /XYZ 85.039 191.263 null] >> endobj 10 0 obj << /D [11 0 R /XYZ 70.866 546.426 null] >> endobj 12 0 obj << /S /GoTo /D [2 0 R /Fit] >> endobj 2 0 obj << /Contents 13 0 R /Type /Page /Resources 14 0 R /Parent 15 0 R /Annots [16 0 R 17 0 R 18 0 R 19 0 R 20 0 R 21 0 R 22 0 R 23 0 R 24 0 R 25 0 R 26 0 R 27 0 R 28 0 R 29 0 R] /MediaBox [0 0 595.276 841.89] >> endobj 16 0 obj << /A << /S /GoTo /D (section*.3) >> /Subtype /Link /C [1 0 0] /Type /Annot /H /I /Border [0 0 0] /Rect [458.38 443.476 518.276 453] >> endobj 18 0 obj << /A << /S /GoTo /D (section*.3) >> /Subtype /Link /C [1 0 0] /Type /Annot /H /I /Border [0 0 0] /Rect [458.38 401.435 518.276 410.959] >> endobj 20 0 obj << /A << /S /URI /Type /Action /URI (https://support.industry.siemens.com/cs/ww/en/view/109761055) >> /C [0 1 1] /Subtype /Link /Type /Annot /H /I /Border [0 0 0] /Rect [303.117 357.502 518.276 368.919] >> endobj 22 0 obj << /A << /S /GoTo /D (section*.3) >> /Subtype /Link /C [1 0 0] /Type /Annot /H /I /Border [0 0 0] /Rect [302.649 320.147 433.497 332.824] >> endobj 23 0 obj << /A << /S /GoTo /D (section*.3) >> /Subtype /Link /C [1 0 0] /Type /Annot /H /I /Border [0 0 0] /Rect [302.649 278.107 433.497 290.784] >> endobj 24 0 obj << /A << /S /GoTo /D (section*.3) >> /Subtype /Link /C [1 0 0] /Type /Annot /H /I /Border [0 0 0] /Rect [302.649 236.066 433.497 248.744] >> endobj 25 0 obj << /A << /S /GoTo /D (section*.3) >> /Subtype /Link /C [1 0 0] /Type /Annot /H /I /Border [0 0 0] /Rect [458.38 209.364 518.276 218.888] >> endobj 27 0 obj << /A << /S /URI /Type /Action /URI (https://support.industry.siemens.com/cs/ww/en/view/109756847) >> /C [0 1 1] /Subtype /Link /Type /Annot /H /I /Border [0 0 0] /Rect [303.117 153.475 518.276 164.892] >> endobj 29 0 obj << /A << /S /GoTo /D (section*.3) >> /Subtype /Link /C [1 0 0] /Type /Annot /H /I /Border [0 0 0] /Rect [302.649 116.12 433.497 128.798] >> endobj 30 0 obj << /A << /S /URI /Type /Action /URI (https://support.industry.siemens.com/cs/ww/en/view/109756846) >> /C [0 1 1] /Subtype /Link /Type /Annot /H /I /Border [0 0 0] /Rect [303.117 720.51 518.276 731.927] >> endobj 31 0 obj << /A << /S /GoTo /D (section*.3) >> /Subtype /Link /C [1 0 0] /Type /Annot /H /I /Border [0 0 0] /Rect [302.649 683.155 433.497 695.833] >> endobj 32 0 obj << /A << /S /URI /Type /Action /URI (https://support.industry.siemens.com/cs/ww/en/view/109757796) >> /C [0 1 1] /Subtype /Link /Type /Annot /H /I /Border [0 0 0] /Rect [303.117 642.604 518.276 654.021] >> endobj 33 0 obj << /A << /S /GoTo /D (section*.3) >> /Subtype /Link /C [1 0 0] /Type /Annot /H /I /Border [0 0 0] /Rect [302.649 605.249 433.497 617.927] >> endobj 34 0 obj << /A << /S /GoTo /D (section*.3) >> /Subtype /Link /C [1 0 0] /Type /Annot /H /I /Border [0 0 0] /Rect [302.649 563.209 433.497 575.886] >> endobj 35 0 obj << /A << /S /URI /Type /Action /URI (https://support.industry.siemens.com/cs/ww/en/view/109807351/) >> /C [0 1 1] /Subtype /Link /Type /Annot /H /I /Border [0 0 0] /Rect [303.117 534.613 518.276 546.03] >> endobj 36 0 obj << /A << /S /GoTo /D (section*.3) >> /Subtype /Link /C [1 0 0] /Type /Annot /H /I /Border [0 0 0] /Rect [302.649 497.258 433.497 509.936] >> endobj 37 0 obj << /A << /S /URI /Type /Action /URI (https://support.industry.siemens.com/cs/ww/en/view/109762690) >> /C [0 1 1] /Subtype /Link /Type /Annot /H /I /Border [0 0 0] /Rect [303.117 468.663 518.276 480.08] >> endobj 38 0 obj << /A << /S /GoTo /D (section*.3) >> /Subtype /Link /C [1 0 0] /Type /Annot /H /I /Border [0 0 0] /Rect [302.649 431.308 433.497 443.985] >> endobj 39 0 obj << /A << /S /GoTo /D (section*.3) >> /Subtype /Link /C [1 0 0] /Type /Annot /H /I /Border [0 0 0] /Rect [458.38 404.605 518.276 414.129] >> endobj 40 0 obj << /A << /S /GoTo /D (section*.3) >> /Subtype /Link /C [1 0 0] /Type /Annot /H /I /Border [0 0 0] /Rect [458.38 362.565 518.276 372.089] >> endobj 41 0 obj << /A << /S /GoTo /D (section*.3) >> /Subtype /Link /C [1 0 0] /Type /Annot /H /I /Border [0 0 0] /Rect [458.38 320.524 518.276 330.049] >> endobj 42 0 obj << /A << /S /GoTo /D (section*.3) >> /Subtype /Link /C [1 0 0] /Type /Annot /H /I /Border [0 0 0] /Rect [302.649 239.236 433.497 251.914] >> endobj 43 0 obj << /A << /S /GoTo /D (section*.3) >> /Subtype /Link /C [1 0 0] /Type /Annot /H /I /Border [0 0 0] /Rect [302.649 137.42 433.497 150.097] >> endobj 44 0 obj << /A << /S /GoTo /D (section*.3) >> /Subtype /Link /C [1 0 0] /Type /Annot /H /I /Border [0 0 0] /Rect [458.38 110.717 518.276 120.241] >> endobj 45 0 obj << /A << /S /GoTo /D (section*.3) >> /Subtype /Link /C [1 0 0] /Type /Annot /H /I /Border [0 0 0] /Rect [458.38 734.358 518.276 743.882] >> endobj 46 0 obj << /A << /S /GoTo /D (section*.3) >> /Subtype /Link /C [1 0 0] /Type /Annot /H /I /Border [0 0 0] /Rect [458.38 692.318 518.276 701.842] >> endobj 47 0 obj << /A << /S /GoTo /D (section*.3) >> /Subtype /Link /C [1 0 0] /Type /Annot /H /I /Border [0 0 0] /Rect [302.649 634.94 433.497 647.617] >> endobj 48 0 obj << /A << /S /GoTo /D (section*.3) >> /Subtype /Link /C [1 0 0] /Type /Annot /H /I /Border [0 0 0] /Rect [302.649 592.9 433.497 605.577] >> endobj 49 0 obj << /A << /S /URI /Type /Action /URI (https://support.industry.siemens.com/cs/ww/en/view/109759753) >> /C [0 1 1] /Subtype /Link /Type /Annot /H /I /Border [0 0 0] /Rect [303.117 564.304 518.276 575.721] >> endobj 50 0 obj << /A << /S /GoTo /D (section*.3) >> /Subtype /Link /C [1 0 0] /Type /Annot /H /I /Border [0 0 0] /Rect [302.649 526.949 433.497 539.627] >> endobj 51 0 obj << /A << /S /URI /Type /Action /URI (https://support.industry.siemens.com/cs/ww/en/view/109747394) >> /C [0 1 1] /Subtype /Link /Type /Annot /H /I /Border [0 0 0] /Rect [303.117 498.353 518.276 509.771] >> endobj 52 0 obj << /A << /S /GoTo /D (section*.3) >> /Subtype /Link /C [1 0 0] /Type /Annot /H /I /Border [0 0 0] /Rect [302.649 460.998 433.497 473.676] >> endobj 53 0 obj << /A << /S /URI /Type /Action /URI (https://support.industry.siemens.com/cs/ww/en/view/109762887) >> /C [0 1 1] /Subtype /Link /Type /Annot /H /I /Border [0 0 0] /Rect [303.117 432.403 518.276 443.82] >> endobj 54 0 obj << /A << /S /GoTo /D (section*.3) >> /Subtype /Link /C [1 0 0] /Type /Annot /H /I /Border [0 0 0] /Rect [302.649 395.048 433.497 407.725] >> endobj 55 0 obj << /A << /S /URI /Type /Action /URI (https://support.industry.siemens.com/cs/ww/en/view/109756123) >> /C [0 1 1] /Subtype /Link /Type /Annot /H /I /Border [0 0 0] /Rect [303.117 366.452 518.276 377.869] >> endobj 56 0 obj << /A << /S /GoTo /D (section*.3) >> /Subtype /Link /C [1 0 0] /Type /Annot /H /I /Border [0 0 0] /Rect [302.649 329.097 433.497 341.775] >> endobj 57 0 obj << /A << /S /URI /Type /Action /URI (https://support.industry.siemens.com/cs/ww/en/view/109753031) >> /C [0 1 1] /Subtype /Link /Type /Annot /H /I /Border [0 0 0] /Rect [303.117 300.501 518.276 311.919] >> endobj 58 0 obj << /A << /S /GoTo /D (section*.3) >> /Subtype /Link /C [1 0 0] /Type /Annot /H /I /Border [0 0 0] /Rect [302.649 263.146 433.497 275.824] >> endobj 14 0 obj << /ProcSet [/PDF /Text] /Font << /F52 59 0 R /F49 60 0 R >> >> endobj 13 0 obj << /Filter /FlateDecode /Length 2524 >> stream x��[Ks�8��W�HUE0ޏ�^ ����$�Z���2sP$�a�,y��7�~�R"E��B�3�$D4�_?!��6��?O�]��~�.r�i���id(�ZG�9����&��x�&w�|��sc�a2�,{}��t�# �M �����o=��/M�X.&��zp~ك��z^�rr~u�� ш�P���N��I� |�KD�p6z�o�ER ����Y4<�� ̈́ʯ%�(�Q�P˛hZI��[�^?�GL’�)*H9´�4<� i5wo�1��mg�He��HF�s�h0I�2M 5!\Y���< ���i�����! ’Ui�i�j� �J�IÝ$���v"�n�Y+����4�7�y� }Kg�ӊ ���"���8kZ� 'ָ&9�5�sS�#��0� +wa\RK��mH�J�&�%u�M�g ?�� ���AU��Ȅi+���Hx���q`�BHL����`X�\QAh{��q� J� c��s$f� h̛Z�� ��������p�[�7��ڬ. g�� J�d����F�Ĵee ~K�A��z\vb �l�q��Ĝ;D� �������HkZQЄ�f� �j�_k ��t�܁�R�R��4�A88�뗛�:�� ���l�B_ц" �RS|Q�*ʼ_,1K[L{��*]�G�w-��,@�T����]h��H��[�h>�4B�N�k n�H���?�vs��ax�&��f�~5�TX��yM�,Q��Y�k�< �!?���j �\�O�,e�Y����3^��q=�,��<�xӳ�.��.`�d��7�n����0Lz���w�U�Յ��0ZŐ�?�~͠��9ۓ5�� l���Y(_X�ן>�]������%�1�9�r���hw0� ԭ�~�$�����+t�y⇿�V��[���������A)O&�t ��;0f�{�#���I������y%�S��75Dp� F-*�zs��d�Ayl� �)���@�G����k������0s����1#��B% ��(m {こ]����5(��e2KB�0��(�>���؇�@<=����\�9���Կ��ׁ���CK"[(H�/I��z�Ò���l`�ܬ�-�N�Hf lP��XCm��N�B���`Xiv�_&����2� cSl�H�k�Ȗ� 9�$<���8<��͞���@��eN��קg!�� �ȣ �c*۶G�’�̎!�J>:_�߄;O;��� �ے�a�^K�t6 no��ZW����R6� K -\����\�ه烫��uQ�_�feȡ��-n��kż��X�H [&%�/.Qy_�_�j�Zy���Dψ!� ���i�i#�6�s��9��ub�s��i �+�GbR�2��/�^_}�����x$��q�\��b������H4@ l�5���-��y��a��D��ho�ԃ�2W\�9��(� /�hZ���:.����Hȭ��И� &��>V����^���h�AY���V1� ������!�fBwU����,k�B�$ b��ű �~B�*���� � i t��’d�$���h��s� X�Ij��_O�9&���-��,2��, ������<v���ޅ�r�|6�ҪRnP,�z��8** ��g?�0 ��<�/ܦYp�����d�’>6�`�T��� ��w��G�* N���p��� ȡ� *�+�$��z��<6�?�%�2�r��e���,l��S�No�����b�s�P�k��b:����l� �b���5Y�%��-��m�S�x��E�� ,�p=WЌ�hPXw���4�"8DC)�%��+��EHu�j�v�E�&��#�ؑ��xT c9��5ߪ�u��P���Yڂj`ЄK�;���� ϾV�+V��-h@gx�$ -�-_�ּ��}��_�==]m���7�=��’�����"u6&��(g2&`�������i2?�3,�s0l�c*��4�\��Qg4���!� �V\��v��Ǒ��0�e�?~�Y��L 3(�B(/��.��� �&FX�ġ��Rus i���R*�8����I���ǐn��x!�D�.����V5��’̩���@QO�{9\�|ÚD�n6ҕڈ�&�Ql��SPMF�~&�l I��6���sɷ/�����?e@ �L�k���|�e,�`�W�/���u��=E�<�cX��{n����!ͻ�y�o{���¾���s�AJ��_Y�1�~�u)��s� ²ⲓ�t������4Kb4������I��|�uB�8������bW����� "[�J<�ʗx��i�k�x��sAc=�K����][��t^�uw@M���w� ք ;�L��J[i�- �\O+������z�"��`LV]���C\E��q� L�C~o��’$��T~z\���X�#�8��d\�=���mfL�!Lõ���?�$� endstream endobj 61 0 obj << /D [2 0 R /XYZ 69.866 808.885 null] >> endobj 60 0 obj << /Subtype /Type1 /FirstChar 2 /Type /Font /BaseFont /SEMOPT+NimbusSanL-Regu /FontDescriptor 62 0 R /Encoding 63 0 R /LastChar 169 /Widths 64 0 R >> endobj 59 0 obj << /Subtype /Type1 /FirstChar 44 /Type /Font /BaseFont /JGHFWW+NimbusSanL-Bold /FontDescriptor 65 0 R /Encoding 63 0 R /LastChar 121 /Widths 66 0 R >> endobj 67 0 obj << /D [2 0 R /XYZ 70.866 490.407 null] >> endobj 17 0 obj << /A << /S /GoTo /D (section*.3) >> /Subtype /Link /C [1 0 0] /Type /Annot /H /I /Border [0 0 0] /Rect [303.117 428.138 372.108 440.815] >> endobj 19 0 obj << /A << /S /GoTo /D (section*.3) >> /Subtype /Link /C [1 0 0] /Type /Annot /H /I /Border [0 0 0] /Rect [303.117 386.098 372.108 398.775] >> endobj 21 0 obj << /A << /S /URI /Type /Action /URI (https://support.industry.siemens.com/cs/ww/en/view/109761055) >> /C [0 1 1] /Subtype /Link /Type /Annot /H /I /Border [0 0 0] /Rect [303.117 347.44 377.209 356.964] >> endobj 26 0 obj << /A << /S /GoTo /D (section*.3) >> /Subtype /Link /C [1 0 0] /Type /Annot /H /I /Border [0 0 0] /Rect [303.117 194.026 372.108 206.704] >> endobj 28 0 obj << /A << /S /URI /Type /Action /URI (https://support.industry.siemens.com/cs/ww/en/view/109756847) >> /C [0 1 1] /Subtype /Link /Type /Annot /H /I /Border [0 0 0] /Rect [303.117 143.413 377.209 152.937] >> endobj 15 0 obj << /Kids [2 0 R 68 0 R 6 0 R 9 0 R 11 0 R] /Type /Pages /Count 5 >> endobj 69 0 obj << /ProcSet [/PDF /Text] /Font << /F49 60 0 R >> >> endobj 68 0 obj << /Contents 70 0 R /Type /Page /Resources 69 0 R /Parent 15 0 R /Annots [30 0 R 71 0 R 31 0 R 32 0 R 72 0 R 33 0 R 34 0 R 35 0 R 73 0 R 36 0 R 37 0 R 74 0 R 38 0 R 39 0 R 75 0 R 40 0 R 76 0 R 41 0 R 77 0 R 42 0 R 43 0 R 44 0 R 78 0 R] /MediaBox [0 0 595.276 841.89] >> endobj 70 0 obj << /Filter /FlateDecode /Length 1771 >> stream x��ZMs�6��W�H������x�4�i��jrHrP$��T&]����J�(Y�I)=hR�b�v�$��"�� ��YbS��6Ҕ�"m-����$��L��$]�/�6�M2^�� �i��_��|�.2��i .}�U{���y6Y��W��x���y���j�����`�$�C4��}�L� ��6��[=w�GBr"��,���٣aP[@(c�V@��۶�U���� �E��2A� b!�.n�B#�" ���> T�7W �����W��xQ�D�����.���{. f� ����/g3o�[��8�/�Y����C��C㯇 (�ct#>�j����`�S����йG�ѓQ�x��� u@ t��.s���� U��L��E��5�E�]ϰ�y ���{�E�h8�w �q�h��<X� ˇ��’6��4�,���"S���"DL���`�<>�t��/G�`D �{�6M � @������P!ŕ����q��ķ�܂��W7~we��/��§�66��g���E2Ο����F#��� �d^M� ͳe: �9J’���4�ޅ���D����s�&ʠ��?[*����*�@n��(S�@nX3�b��冭�H�P��@`P�n�~�ʦ�� 3��S"Ž̘)� C�&+r�]�J�"9