{"metadata": {"vulnerability": "cve-2018-4843", "count": 61, "kinds": {"milestone": 8, "sighting": 1, "kev": 0, "other": 52}}, "data": [{"timestamp": "2018-01-02T00:00:00Z", "date_only": false, "value": "2018-01-02T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2018-4843", "field": "cveMetadata.dateReserved"}, {"timestamp": "2018-03-20T00:00:00Z", "date_only": false, "value": "2018-03-20T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-18-079-02", "record": "ICSA-18-079-02", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2018-03-20T00:00:00Z", "date_only": false, "value": "2018-03-20T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-592007", "record": "SSA-592007", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2018-03-20T00:00:00Z", "date_only": false, "value": "2018-03-20T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201803-2159", "record": "VAR-201803-2159", "field": "sources_update_date.data.2.date"}, {"timestamp": "2018-03-20T00:00:00Z", "date_only": false, "value": "2018-03-20T00:00:00.000000Z", "kind": "milestone", "label": "Published", "source": "csaf_cisa \u00b7 ICSA-18-079-02", "record": "ICSA-18-079-02", "field": "document.tracking.initial_release_date"}, {"timestamp": "2018-03-20T00:00:00Z", "date_only": false, "value": "2018-03-20T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_siemens \u00b7 SSA-592007", "record": "SSA-592007", "field": "document.tracking.initial_release_date"}, {"timestamp": "2018-03-20T14:00:00Z", "date_only": false, "value": "2018-03-20T14:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2018-4843", "field": "cveMetadata.datePublished"}, {"timestamp": "2018-03-20T14:29:00Z", "date_only": false, "value": "2018-03-20T14:29:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-2CG6-W8MM-22RG", "record": "GHSA-2CG6-W8MM-22RG", "field": "database_specific.nvd_published_at"}, {"timestamp": "2018-03-20T14:29:00Z", "date_only": false, "value": "2018-03-20T14:29Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2018-4843", "record": "GSD-2018-4843", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2018-03-20T14:29:00.413Z", "date_only": false, "value": "2018-03-20T14:29:00.413000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201803-2159", "record": "VAR-201803-2159", "field": "sources_release_date.data.6.date"}, {"timestamp": "2018-03-20T14:29:00.413Z", "date_only": false, "value": "2018-03-20T14:29:00.413", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2018-4843", "record": "FKIE_CVE-2018-4843", "field": "published"}, {"timestamp": "2018-03-21T00:00:00Z", "date_only": false, "value": "2018-03-21T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201803-2159", "record": "VAR-201803-2159", "field": "sources_release_date.data.5.date"}, {"timestamp": "2018-03-21T00:00:00Z", "date_only": false, "value": "2018-03-21T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2018-AVI-140", "record": "CERTFR-2018-AVI-140", "field": "last_revision_date"}, {"timestamp": "2018-03-21T00:00:00Z", "date_only": false, "value": "2018-03-21T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2018-AVI-140", "record": "CERTFR-2018-AVI-140", "field": "initial_release_date"}, {"timestamp": "2018-03-21T00:00:00Z", "date_only": false, "value": "2018-03-21T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2018-AVI-140", "record": "CERTFR-2018-AVI-140", "field": "revisions.0.revision_date"}, {"timestamp": "2018-03-21T14:04:35Z", "date_only": false, "value": "2018-03-21T14:04:35.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/information_security_channel/14893", "record": "CVE-2018-4843", "field": "creation_timestamp", "uuid": "9263731c-1a35-45f3-8049-7afe5d6b7d78", "content": "Siemens Patches Flaws in SIMATIC Controllers, Mobile Apps\nhttp://feedproxy.google.com/~r/Securityweek/~3/St5f_O1dcIg/siemens-patches-flaws-simatic-controllers-mobile-apps\n\nGerman industrial giant Siemens has released security patches for several of its SIMATIC products, including some controllers and a mobile application.\nOrganizations using SIMATIC products were informed by both Siemens (https://cert-portal.siemens.com/productcert/pdf/ssa-592007.pdf) and ICS-CERT (https://ics-cert.us-cert.gov/advisories/ICSA-18-079-02) this week of a denial-of-service (DoS) vulnerability that can be exploited by sending specially crafted PROFINET DCP packets to affected systems.\nThe flaw, tracked as CVE-2018-4843 and classified as medium severity, can be exploited by an attacker who has access to the network housing the targeted device. While DoS vulnerabilities are generally seen as less severe compared to code execution and other types of flaws, in the case of industrial control systems (ICS), they can have serious impact.\nThe security hole affects several SIMATIC central processing units (CPUs) and software controllers, SINUMERIK CNC automation solutions, and Softnet PROFINET IO controllers. Siemens has released patches for some of the impacted systems, and provided workarounds and mitigations for the rest.\nLearn More at SecurityWeek\u2019s ICS Cyber Security Conference\nSiemens also informed customers on Tuesday of an access control vulnerability affecting the Android and iOS versions of its SIMATIC WinCC OA UI mobile application. This app is designed to allow users to remotely access WinCC OA facilities from their mobile devices.\n\u201cThe latest update for the Android app and iOS app SIMATIC WinCC OA UI fix a security vulnerability which could allow read and write access from one HMI project cache folder to other HMI project cache folders within the app\u2019s sandbox on the same mobile device,\u201d Siemens wrote in its advisory (https://cert-portal.siemens.com/productcert/pdf/ssa-822928.pdf).\n\u201cThis includes HMI project cache folders of other configured WinCC OA servers. Precondition for this scenario is that an attacker tricks an app user to connect to an attacker-controlled WinCC OA server,\u201d it added.\nThe SIMATIC WinCC OA UI application vulnerability was discovered by experts at IOActive and Embedi as part of their research into SCADA mobile apps (https://www.securityweek.com/security-flaws-found-majority-scada-mobile-apps). They analyzed applications from 34 vendors and found security holes in a vast majority of them.\nRelated: Schneider Electric Patches Several Flaws in IGSS Products (https://www.securityweek.com/schneider-electric-patches-several-flaws-igss-products)\nRelated: Siemens Releases BIOS Updates to Patch Intel Chip Flaws (https://www.securityweek.com/siemens-releases-bios-updates-patch-intel-chip-flaws)\nRelated: Serious Flaw Found in Many Siemens Industrial Products (https://www.securityweek.com/serious-flaw-found-many-siemens-industrial-products)", "url": "https://t.me/information_security_channel/14893"}, {"timestamp": "2018-03-22T00:00:00Z", "date_only": false, "value": "2018-03-22T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201803-2159", "record": "VAR-201803-2159", "field": "sources_release_date.data.0.date"}, {"timestamp": "2018-03-22T00:00:00Z", "date_only": true, "value": "2018-03-22", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2018-06025", "record": "CNVD-2018-06025", "field": "openTime"}, {"timestamp": "2018-03-22T00:00:00Z", "date_only": true, "value": "2018-03-22", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2018-06025", "record": "CNVD-2018-06025", "field": "submitTime"}, {"timestamp": "2018-03-27T00:00:00Z", "date_only": false, "value": "2018-03-27T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-18-079-02", "record": "ICSA-18-079-02", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2018-03-27T00:00:00Z", "date_only": false, "value": "2018-03-27T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-592007", "record": "SSA-592007", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2018-05-24T00:00:00Z", "date_only": false, "value": "2018-05-24T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201803-2159", "record": "VAR-201803-2159", "field": "sources_release_date.data.4.date"}, {"timestamp": "2018-07-04T00:00:00Z", "date_only": false, "value": "2018-07-04T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201803-2159", "record": "VAR-201803-2159", "field": "sources_update_date.data.3.date"}, {"timestamp": "2018-10-09T00:00:00Z", "date_only": false, "value": "2018-10-09T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-18-079-02", "record": "ICSA-18-079-02", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2018-10-09T00:00:00Z", "date_only": false, "value": "2018-10-09T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-592007", "record": "SSA-592007", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2019-01-08T00:00:00Z", "date_only": false, "value": "2019-01-08T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-18-079-02", "record": "ICSA-18-079-02", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2019-01-08T00:00:00Z", "date_only": false, "value": "2019-01-08T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-592007", "record": "SSA-592007", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2019-05-14T00:00:00Z", "date_only": false, "value": "2019-05-14T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-18-079-02", "record": "ICSA-18-079-02", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2019-05-14T00:00:00Z", "date_only": false, "value": "2019-05-14T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-592007", "record": "SSA-592007", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2019-08-22T00:00:00Z", "date_only": false, "value": "2019-08-22T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201803-2159", "record": "VAR-201803-2159", "field": "sources_update_date.data.0.date"}, {"timestamp": "2019-10-08T00:00:00Z", "date_only": false, "value": "2019-10-08T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-18-079-02", "record": "ICSA-18-079-02", "field": "document.tracking.revision_history.5.date"}, {"timestamp": "2019-10-08T00:00:00Z", "date_only": false, "value": "2019-10-08T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-592007", "record": "SSA-592007", "field": "document.tracking.revision_history.5.date"}, {"timestamp": "2020-02-10T00:00:00Z", "date_only": false, "value": "2020-02-10T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-18-079-02", "record": "ICSA-18-079-02", "field": "document.tracking.revision_history.6.date"}, {"timestamp": "2020-02-10T00:00:00Z", "date_only": false, "value": "2020-02-10T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-592007", "record": "SSA-592007", "field": "document.tracking.revision_history.6.date"}, {"timestamp": "2022-05-13T01:31:10Z", "date_only": false, "value": "2022-05-13T01:31:10Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-2CG6-W8MM-22RG", "record": "GHSA-2CG6-W8MM-22RG", "field": "published"}, {"timestamp": "2022-05-13T01:31:10Z", "date_only": false, "value": "2022-05-13T01:31:10Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-2CG6-W8MM-22RG", "record": "GHSA-2CG6-W8MM-22RG", "field": "modified"}, {"timestamp": "2022-06-14T00:00:00Z", "date_only": false, "value": "2022-06-14T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-18-079-02", "record": "ICSA-18-079-02", "field": "document.tracking.revision_history.7.date"}, {"timestamp": "2022-06-14T00:00:00Z", "date_only": false, "value": "2022-06-14T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-592007", "record": "SSA-592007", "field": "document.tracking.revision_history.7.date"}, {"timestamp": "2022-08-09T00:00:00Z", "date_only": false, "value": "2022-08-09T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-18-079-02", "record": "ICSA-18-079-02", "field": "document.tracking.revision_history.8.date"}, {"timestamp": "2022-08-09T00:00:00Z", "date_only": false, "value": "2022-08-09T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-592007", "record": "SSA-592007", "field": "document.tracking.revision_history.8.date"}, {"timestamp": "2023-01-10T00:00:00Z", "date_only": false, "value": "2023-01-10T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-18-079-02", "record": "ICSA-18-079-02", "field": "document.tracking.revision_history.9.date"}, {"timestamp": "2023-01-10T00:00:00Z", "date_only": false, "value": "2023-01-10T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-592007", "record": "SSA-592007", "field": "document.tracking.revision_history.9.date"}, {"timestamp": "2023-01-10T00:00:00Z", "date_only": false, "value": "2023-01-10T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201803-2159", "record": "VAR-201803-2159", "field": "sources_update_date.data.1.date"}, {"timestamp": "2023-01-10T00:00:00Z", "date_only": false, "value": "2023-01-10T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0015", "record": "CERTFR-2023-AVI-0015", "field": "last_revision_date"}, {"timestamp": "2023-01-10T00:00:00Z", "date_only": false, "value": "2023-01-10T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0015", "record": "CERTFR-2023-AVI-0015", "field": "initial_release_date"}, {"timestamp": "2023-01-10T00:00:00Z", "date_only": false, "value": "2023-01-10T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0015", "record": "CERTFR-2023-AVI-0015", "field": "revisions.0.revision_date"}, {"timestamp": "2023-04-11T00:00:00Z", "date_only": false, "value": "2023-04-11T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-18-079-02", "record": "ICSA-18-079-02", "field": "document.tracking.revision_history.10.date"}, {"timestamp": "2023-04-11T00:00:00Z", "date_only": false, "value": "2023-04-11T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-592007", "record": "SSA-592007", "field": "document.tracking.revision_history.10.date"}, {"timestamp": "2023-05-09T00:00:00Z", "date_only": false, "value": "2023-05-09T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-18-079-02", "record": "ICSA-18-079-02", "field": "document.tracking.revision_history.11.date"}, {"timestamp": "2023-05-09T00:00:00Z", "date_only": false, "value": "2023-05-09T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-592007", "record": "SSA-592007", "field": "document.tracking.revision_history.11.date"}, {"timestamp": "2023-05-09T00:00:00Z", "date_only": false, "value": "2023-05-09T00:00:00.000000Z", "kind": "other", "label": "Updated", "source": "csaf_cisa \u00b7 ICSA-18-079-02", "record": "ICSA-18-079-02", "field": "document.tracking.current_release_date"}, {"timestamp": "2023-05-09T00:00:00Z", "date_only": false, "value": "2023-05-09T00:00:00Z", "kind": "other", "label": "Updated", "source": "csaf_siemens \u00b7 SSA-592007", "record": "SSA-592007", "field": "document.tracking.current_release_date"}, {"timestamp": "2023-05-09T11:50:59.460Z", "date_only": false, "value": "2023-05-09T11:50:59.460Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / siemens", "record": "cve-2018-4843", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-05-09T13:15:00Z", "date_only": false, "value": "2023-05-09T13:15Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2018-4843", "record": "GSD-2018-4843", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-05-10T00:00:00Z", "date_only": false, "value": "2023-05-10T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201803-2159", "record": "VAR-201803-2159", "field": "sources_update_date.data.4.date"}, {"timestamp": "2023-12-13T01:22:28.273Z", "date_only": false, "value": "2023-12-13T01:22:28.273882Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2018-4843", "record": "GSD-2018-4843", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-05T05:18:26.626Z", "date_only": false, "value": "2024-08-05T05:18:26.626Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2018-4843", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-05T05:18:26.626Z", "date_only": false, "value": "2024-08-05T05:18:26.626Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2018-4843", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-11-21T04:07:34.080Z", "date_only": false, "value": "2024-11-21T04:07:34.080000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201803-2159", "record": "VAR-201803-2159", "field": "sources_update_date.data.5.date"}, {"timestamp": "2024-11-23T22:55:55.082Z", "date_only": false, "value": "2024-11-23T22:55:55.082000Z", "kind": "other", "label": "Last update date", "source": "variot \u00b7 VAR-201803-2159", "record": "VAR-201803-2159", "field": "last_update_date"}, {"timestamp": "2026-06-17T01:59:09.177Z", "date_only": false, "value": "2026-06-17T01:59:09.177", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2018-4843", "record": "FKIE_CVE-2018-4843", "field": "lastModified"}]}