CVE-2018-13808

Name of the Vulnerable Software and Affected Versions Siemens CP 1604 versions all Siemens CP 1616 versions all

Description The issue is related to the lack of authentication for the Telnet service in the Siemens CP communication module software. This could allow a remote attacker to extract data or cause a denial-of-service condition. The attacker would need network access to port 23/tcp to exploit this issue. At the time of reporting, there were no known public exploits of this issue.

Recommendations For Siemens CP 1604, restrict access to port 23/tcp to minimize the risk of exploitation. For Siemens CP 1616, restrict access to port 23/tcp to minimize the risk of exploitation.