CVE-2018-25108 - Vulnerability Details - OpenCVE

An unauthenticated remote attacker can cause a DoS in the controller due to uncontrolled resource consumption.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable yes

Technical Impact partial

No data.

No data.

No data.

References

Link	Providers
https://cert.vde.com/en/advisories/VDE-2018-013

History

Thu, 16 Jan 2025 15:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Thu, 16 Jan 2025 10:30:00 +0000

Type	Values Removed	Values Added
Description		An unauthenticated remote attacker can cause a DoS in the controller due to uncontrolled resource consumption.
Title		WAGO: Denial of service in 750-8xx controller due to uncontrolled resource consumption
Weaknesses		CWE-770
References		https://cert.vde.com/en/advisories/VDE-2018-013
Metrics		cvssV3_1 `{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}`

MITRE

Status: PUBLISHED

Assigner: CERTVDE

Published: 2025-01-16T10:17:21.149Z

Updated: 2025-01-16T14:13:05.340Z

Reserved: 2025-01-15T15:08:51.058Z

Link: CVE-2018-25108

Vulnrichment

Updated: 2025-01-16T14:12:57.196Z

NVD

Status : Received

Published: 2025-01-16T11:15:06.850

Modified: 2025-01-16T11:15:06.850

Link: CVE-2018-25108

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2018-25108", "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c", "state": "PUBLISHED", "assignerShortName": "CERTVDE", "dateReserved": "2025-01-15T15:08:51.058Z", "datePublished": "2025-01-16T10:17:21.149Z", "dateUpdated": "2025-01-16T14:13:05.340Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "750-8100 (Controller PFC100)", "vendor": "WAGO", "versions": [{"lessThanOrEqual": "02.05.23(08)", "status": "affected", "version": "0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "750-831 (Controller BACnet/IP)", "vendor": "WAGO", "versions": [{"lessThanOrEqual": "01.02.29(09)", "status": "affected", "version": "0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "750-880 (Controller ETH)", "vendor": "WAGO", "versions": [{"lessThanOrEqual": "01.07.03(10)", "status": "affected", "version": "0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "750-889 (Controller KNX IP)", "vendor": "WAGO", "versions": [{"lessThanOrEqual": "01.07.13(10)", "status": "affected", "version": "0", "versionType": "semver"}]}], "credits": [{"lang": "en", "type": "finder", "user": "00000000-0000-4000-9000-000000000000", "value": "Matthias Niedermaier (Hochschule Augsburg)"}, {"lang": "en", "type": "finder", "user": "00000000-0000-4000-9000-000000000000", "value": "Jan-Ole Malchow (Freie Universita\u0308t Berlin)"}, {"lang": "en", "type": "finder", "user": "00000000-0000-4000-9000-000000000000", "value": "Florian Fischer (Hochschule Augsburg)"}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "An unauthenticated remote attacker can cause a DoS in the controller due to uncontrolled resource consumption.<br>"}], "value": "An unauthenticated remote attacker can cause a DoS in the controller due to\u00a0uncontrolled resource consumption."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-770", "description": "CWE-770 Allocation of Resources Without Limits or Throttling", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c", "shortName": "CERTVDE", "dateUpdated": "2025-01-16T10:17:21.149Z"}, "references": [{"url": "https://cert.vde.com/en/advisories/VDE-2018-013"}], "source": {"advisory": "VDE-2018-013", "discovery": "UNKNOWN"}, "title": "WAGO: Denial of service in 750-8xx controller due to uncontrolled resource consumption", "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-01-16T14:12:32.309251Z", "id": "CVE-2018-25108", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-01-16T14:13:05.340Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2018-25108", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-01-16T14:12:32.309251Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-01-16T14:12:57.196Z"}}], "cna": {"title": "WAGO: Denial of service in 750-8xx controller due to uncontrolled resource consumption", "source": {"advisory": "VDE-2018-013", "discovery": "UNKNOWN"}, "credits": [{"lang": "en", "type": "finder", "user": "00000000-0000-4000-9000-000000000000", "value": "Matthias Niedermaier (Hochschule Augsburg)"}, {"lang": "en", "type": "finder", "user": "00000000-0000-4000-9000-000000000000", "value": "Jan-Ole Malchow (Freie Universita\u0308t Berlin)"}, {"lang": "en", "type": "finder", "user": "00000000-0000-4000-9000-000000000000", "value": "Florian Fischer (Hochschule Augsburg)"}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "WAGO", "product": "750-8100 (Controller PFC100)", "versions": [{"status": "affected", "version": "0", "versionType": "semver", "lessThanOrEqual": "02.05.23(08)"}], "defaultStatus": "unaffected"}, {"vendor": "WAGO", "product": "750-831 (Controller BACnet/IP)", "versions": [{"status": "affected", "version": "0", "versionType": "semver", "lessThanOrEqual": "01.02.29(09)"}], "defaultStatus": "unaffected"}, {"vendor": "WAGO", "product": "750-880 (Controller ETH)", "versions": [{"status": "affected", "version": "0", "versionType": "semver", "lessThanOrEqual": "01.07.03(10)"}], "defaultStatus": "unaffected"}, {"vendor": "WAGO", "product": "750-889 (Controller KNX IP)", "versions": [{"status": "affected", "version": "0", "versionType": "semver", "lessThanOrEqual": "01.07.13(10)"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://cert.vde.com/en/advisories/VDE-2018-013"}], "x_generator": {"engine": "Vulnogram 0.1.0-dev"}, "descriptions": [{"lang": "en", "value": "An unauthenticated remote attacker can cause a DoS in the controller due to\u00a0uncontrolled resource consumption.", "supportingMedia": [{"type": "text/html", "value": "An unauthenticated remote attacker can cause a DoS in the controller due to uncontrolled resource consumption.<br>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-770", "description": "CWE-770 Allocation of Resources Without Limits or Throttling"}]}], "providerMetadata": {"orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c", "shortName": "CERTVDE", "dateUpdated": "2025-01-16T10:17:21.149Z"}}}, "cveMetadata": {"cveId": "CVE-2018-25108", "state": "PUBLISHED", "dateUpdated": "2025-01-16T14:13:05.340Z", "dateReserved": "2025-01-15T15:08:51.058Z", "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c", "datePublished": "2025-01-16T10:17:21.149Z", "assignerShortName": "CERTVDE"}, "dataVersion": "5.1"}