CVE-2018-4847 - CVE House
Back to Database
Status published Medium CVE-2018-4847

A vulnerability has been identified in SIMATIC WinCC OA Operator...

Vulnerability Description

A vulnerability has been identified in SIMATIC WinCC OA Operator iOS App (All versions < V1.4). Insufficient protection of sensitive information (e.g. session key for accessing server) in Siemens WinCC OA Operator iOS app could allow an attacker with physical access to the mobile device to read unencrypted data from the app's directory. Siemens provides mitigations to resolve the security issue.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-4847

Credits & Attribution

No credits recorded in the NVD database.

References

More from Siemens AG

View All →
CVE-2020-7593
A vulnerability has been identified in LOGO! 8 BM (incl....
Critical 9.8
CVE-2020-7592
A vulnerability has been identified in SIMATIC HMI Basic Panels...
Medium 6.5
CVE-2020-7584
A vulnerability has been identified in SIMATIC S7-200 SMART CPU...
High 7.5
CVE-2020-7583
A vulnerability has been identified in Automation License Manager 5...
High 7.8
CVE-2020-7579
A vulnerability has been identified in Spectrum Power™ 5 (All...
Medium 6.1

Affected Vendor

Affected Software

SIMATIC WinCC OA Operator iOS App
Vulnerable Versions:
All versions < V1.4

Timeline

Official Publish: April 23rd, 2018
Last Modified: September 17th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weaknesses (CWE)

CWE-538

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.