vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2018-4834

CRITICAL
9.8
CVSS Score
Published: January 24, 2018 at 04:00 PM UTC
Updated: June 17, 2026 at 01:59 AM UTC
23 products affected across 1 vendorPXC00 /50 /100 /200-e.d FirmwarePXC00 /64 /128-u FirmwarePXC12 /22 /36-e.d Firmware

Using Desigo PXC00-E.D V4.10 by Siemens?

Get instant alerts when new vulnerabilities affect Desigo PXC00-E.D V4.10 - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
CRITICAL9.8
Exploit prediction
EPSS 3%

Description

A vulnerability has been identified in Desigo PXC00-E.D V4.10 (All versions < V4.10.111), Desigo PXC00-E.D V5.00 (All versions < V5.0.171), Desigo PXC00-E.D V5.10 (All versions < V5.10.69), Desigo PXC00-E.D V6.00 (All versions < V6.0.204), Desigo PXC00/64/128-U V4.10 (All versions < V4.10.111 only with web module), Desigo PXC00/64/128-U V5.00 (All versions < V5.0.171 only with web module), Desigo PXC00/64/128-U V5.10 (All versions < V5.10.69 only with web module), Desigo PXC00/64/128-U V6.00 (All versions < V6.0.204 only with web module), Desigo PXC001-E.D V4.10 (All versions < V4.10.111), Desigo PXC001-E.D V5.00 (All versions < V5.0.171), Desigo PXC001-E.D V5.10 (All versions < V5.10.69), Desigo PXC001-E.D V6.00 (All versions < V6.0.204), Desigo PXC100-E.D V4.10 (All versions < V4.10.111), Desigo PXC100-E.D V5.00 (All versions < V5.0.171), Desigo PXC100-E.D V5.10 (All versions < V5.10.69), Desigo PXC100-E.D V6.00 (All versions < V6.0.204), Desigo PXC12-E.D V4.10 (All versions < V4.10.111), Desigo PXC12-E.D V5.00 (All versions < V5.0.171), Desigo PXC12-E.D V5.10 (All versions < V5.10.69), Desigo PXC12-E.D V6.00 (All versions < V6.0.204), Desigo PXC200-E.D V4.10 (All versions < V4.10.111), Desigo PXC200-E.D V5.00 (All versions < V5.0.171), Desigo PXC200-E.D V5.10 (All versions < V5.10.69), Desigo PXC200-E.D V6.00 (All versions < V6.0.204), Desigo PXC22-E.D V4.10 (All versions < V4.10.111), Desigo PXC22-E.D V5.00 (All versions < V5.0.171), Desigo PXC22-E.D V5.10 (All versions < V5.10.69), Desigo PXC22-E.D V6.00 (All versions < V6.0.204), Desigo PXC22.1-E.D V4.10 (All versions < V4.10.111), Desigo PXC22.1-E.D V5.00 (All versions < V5.0.171), Desigo PXC22.1-E.D V5.10 (All versions < V5.10.69), Desigo PXC22.1-E.D V6.00 (All versions < V6.0.204), Desigo PXC36.1-E.D V4.10 (All versions < V4.10.111), Desigo PXC36.1-E.D V5.00 (All versions < V5.0.171), Desigo PXC36.1-E.D V5.10 (All versions < V5.10.69), Desigo PXC36.1-E.D V6.00 (All versions < V6.0.204), Desigo PXC50-E.D V4.10 (All versions < V4.10.111), Desigo PXC50-E.D V5.00 (All versions < V5.0.171), Desigo PXC50-E.D V5.10 (All versions < V5.10.69), Desigo PXC50-E.D V6.00 (All versions < V6.0.204), Desigo PXM20-E V4.10 (All versions < V4.10.111), Desigo PXM20-E V5.00 (All versions < V5.0.171), Desigo PXM20-E V5.10 (All versions < V5.10.69), Desigo PXM20-E V6.00 (All versions < V6.0.204). A remote attacker with network access to the device could potentially upload a new firmware image to the devices without prior authentication.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

PXC00 /50 /100 /200-e.d Firmware· Siemens
95%
v < 6.00.204
Affected range stops below 6.00.204, so it looks safe — our inference, not a vendor statement
siemens-pxc00-50-100-200-e-d (same device)
PXC00 /64 /128-u Firmware· Siemens
95%
v < 6.00.204
Affected range stops below 6.00.204, so it looks safe — our inference, not a vendor statement
siemens-pxc00-64-128-u (same device)
Pxc001-e.d Firmware· Siemens
95%
v < 6.00.204
Affected range stops below 6.00.204, so it looks safe — our inference, not a vendor statement
siemens-pxc001-e-d (same device)
PXC12 /22 /36-e.d Firmware· Siemens
95%
v < 6.00.204
Affected range stops below 6.00.204, so it looks safe — our inference, not a vendor statement
siemens-pxc12-22-36-e-d (same device)
Pxm20-e Firmware· Siemens
95%
v < 6.00.204
Affected range stops below 6.00.204, so it looks safe — our inference, not a vendor statement
siemens-pxm20-e (same device)
Desigo PXC00-E.D· Siemens
60%
All versions < V4.10.111All versions < V5.0.171All versions < V5.10.69All versions < V6.0.204
Desigo PXC00-U· Siemens
60%
All versions < V4.10.111 only with web moduleAll versions < V5.0.171 only with web moduleAll versions < V5.10.69 only with web moduleAll versions < V6.0.204 only with web module
Desigo PXC001-E.D· Siemens
60%
All versions < V4.10.111All versions < V5.0.171All versions < V5.10.69All versions < V6.0.204
Desigo PXC100-E.D· Siemens
60%
All versions < V4.10.111All versions < V5.0.171All versions < V5.10.69All versions < V6.0.204
Desigo PXC12-E.D· Siemens
60%
All versions < V4.10.111All versions < V5.0.171All versions < V5.10.69All versions < V6.0.204

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

References (1)

Source: [email protected]
https://cert-portal.siemens.com/productcert/pdf/ssa-824231.pdf

CVSS

9.8CRITICALsiemens
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-306CWE-434

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card