# Improper input validation in Siemens OpenPCS 7 V7.1 and earlier and others CVE record · `CVE-2018-4832` - **Identifiers:** `CVE-2018-4832` - **State:** Confirmed - **Severity:** No CVSS score - **Critical:** No - **CNA:** siemens - **Weakness (CWE):** [CWE-20](https://cwe.mitre.org/data/definitions/20.html) - **Tags:** [CWE-20](https://agentprime.io/advisories/tag/cwe-20.md) - **Technologies:** [Siemens OpenPCS 7 V7.1 and earlier](https://agentprime.io/advisories/technology/siemens-openpcs-7-v7-1-and-earlier.md) · [Siemens OpenPCS 7 V8.0](https://agentprime.io/advisories/technology/siemens-openpcs-7-v8-0.md) · [Siemens OpenPCS 7 V8.1](https://agentprime.io/advisories/technology/siemens-openpcs-7-v8-1.md) · [Siemens OpenPCS 7 V8.2](https://agentprime.io/advisories/technology/siemens-openpcs-7-v8-2.md) · [Siemens OpenPCS 7 V9.0](https://agentprime.io/advisories/technology/siemens-openpcs-7-v9-0.md) · [Siemens SIMATIC BATCH V7.1 and earlier](https://agentprime.io/advisories/technology/siemens-simatic-batch-v7-1-and-earlier.md) · [Siemens SIMATIC BATCH V8.0](https://agentprime.io/advisories/technology/siemens-simatic-batch-v8-0.md) · [Siemens SIMATIC BATCH V8.1](https://agentprime.io/advisories/technology/siemens-simatic-batch-v8-1.md) · [Siemens SIMATIC BATCH V8.2](https://agentprime.io/advisories/technology/siemens-simatic-batch-v8-2.md) · [Siemens SIMATIC BATCH V9.0](https://agentprime.io/advisories/technology/siemens-simatic-batch-v9-0.md) · [Siemens SIMATIC NET PC Software V14](https://agentprime.io/advisories/technology/siemens-simatic-net-pc-software-v14.md) · [Siemens SIMATIC NET PC Software V15](https://agentprime.io/advisories/technology/siemens-simatic-net-pc-software-v15.md) · [Siemens SIMATIC PCS 7 V7.1 and earlier](https://agentprime.io/advisories/technology/siemens-simatic-pcs-7-v7-1-and-earlier.md) · [Siemens SIMATIC PCS 7 V8.0](https://agentprime.io/advisories/technology/siemens-simatic-pcs-7-v8-0.md) · [Siemens SIMATIC PCS 7 V8.1](https://agentprime.io/advisories/technology/siemens-simatic-pcs-7-v8-1.md) · [Siemens SIMATIC PCS 7 V8.2](https://agentprime.io/advisories/technology/siemens-simatic-pcs-7-v8-2.md) · [Siemens SIMATIC PCS 7 V9.0](https://agentprime.io/advisories/technology/siemens-simatic-pcs-7-v9-0.md) · [Siemens SIMATIC Route Control V7.1 and earlier](https://agentprime.io/advisories/technology/siemens-simatic-route-control-v7-1-and-earlier.md) · [Siemens SIMATIC Route Control V8.0](https://agentprime.io/advisories/technology/siemens-simatic-route-control-v8-0.md) · [Siemens SIMATIC Route Control V8.1](https://agentprime.io/advisories/technology/siemens-simatic-route-control-v8-1.md) - **Published:** 24 Apr 2018 - **Updated:** 5 Aug 2024 - **Reviewed by a person:** No Published by the CVE Program (CNA: siemens) at 24 Apr 2018, 17:00 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it. ## Affected products, as the CNA wrote them - Vendor: Siemens. Product: OpenPCS 7 V7.1 and earlier. - affected: `All versions` - Vendor: Siemens. Product: OpenPCS 7 V8.0. - affected: `All versions` - Vendor: Siemens. Product: OpenPCS 7 V8.1. - affected: `All versions < V8.1 Upd5` - Vendor: Siemens. Product: OpenPCS 7 V8.2. - affected: `All versions` - Vendor: Siemens. Product: OpenPCS 7 V9.0. - affected: `All versions < V9.0 Upd1` - Vendor: Siemens. Product: SIMATIC BATCH V7.1 and earlier. - affected: `All versions` - Vendor: Siemens. Product: SIMATIC BATCH V8.0. - affected: `All versions < V8.0 SP1 Upd21` - Vendor: Siemens. Product: SIMATIC BATCH V8.1. - affected: `All versions < V8.1 SP1 Upd16` - Vendor: Siemens. Product: SIMATIC BATCH V8.2. - affected: `All versions < V8.2 Upd10` - Vendor: Siemens. Product: SIMATIC BATCH V9.0. - affected: `All versions < V9.0 SP1` - Vendor: Siemens. Product: SIMATIC NET PC Software V14. - affected: `All versions < V14 SP1 Update 14` - Vendor: Siemens. Product: SIMATIC NET PC Software V15. - affected: `All versions < 15 SP1` - Vendor: Siemens. Product: SIMATIC PCS 7 V7.1 and earlier. - affected: `All versions` - Vendor: Siemens. Product: SIMATIC PCS 7 V8.0. - affected: `All versions` - Vendor: Siemens. Product: SIMATIC PCS 7 V8.1. - affected: `All versions` - Vendor: Siemens. Product: SIMATIC PCS 7 V8.2. - affected: `All versions < V8.2 SP1` - Vendor: Siemens. Product: SIMATIC PCS 7 V9.0. - affected: `All versions < V9.0 SP1` - Vendor: Siemens. Product: SIMATIC Route Control V7.1 and earlier. - affected: `All versions` - Vendor: Siemens. Product: SIMATIC Route Control V8.0. - affected: `All versions` - Vendor: Siemens. Product: SIMATIC Route Control V8.1. - affected: `All versions` - Vendor: Siemens. Product: SIMATIC Route Control V8.2. - affected: `All versions` - Vendor: Siemens. Product: SIMATIC Route Control V9.0. - affected: `All versions < V9.0 Upd1` - Vendor: Siemens. Product: SIMATIC WinCC Runtime Professional V13. - affected: `All versions < V13 SP2 Upd2` - Vendor: Siemens. Product: SIMATIC WinCC Runtime Professional V14. - affected: `All versions < V14 SP1 Upd5` - Vendor: Siemens. Product: SIMATIC WinCC V7.2 and earlier. - affected: `All versions < WinCC 7.2 Upd 15` - Vendor: Siemens. Product: SIMATIC WinCC V7.3. - affected: `All versions < WinCC 7.3 Upd 16` - Vendor: Siemens. Product: SIMATIC WinCC V7.4. - affected: `All versions < V7.4 SP1 Upd 4` - Vendor: Siemens. Product: SPPA-T3000 Application Server. - affected: `All versions < Service Pack R8.2 SP2` ## Not analysed yet We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter. ## Severity and exploitation No source has published a CVSS score for this record yet. - **CISA KEV:** Not listed. - **EPSS:** 0.024, the 84th percentile, on 5 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days. ## Timeline This record came from the full history of the CVE Program, published 24 Apr 2018. New records show when each source confirmed them. ## Sources - [CVE List: CVE-2018-4832](https://www.cve.org/CVERecord?id=CVE-2018-4832) - [NVD: CVE-2018-4832](https://nvd.nist.gov/vuln/detail/CVE-2018-4832) ### References from the CNA - - - Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description. ## Check whether this affects you This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it. Compare the affected versions above with what you run. - With the agentprime MCP server (), `get_advisory` returns this record and `search_advisories` finds related ones. Setup: - As JSON: - Everything that needs attention now: --- The web page: . Everything for agents: .