How severe is CVE-2018-13799?

CVE-2018-13799 has a CVSS 3.x base score of 9.1, rated critical severity. It is exploitable over network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is none, integrity high, and availability high.

Is CVE-2018-13799 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 2% (81st percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2018-13799?

CVE-2018-13799 affects Siemens Simatic Wincc Open Architecture. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2018-13799?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.

When was CVE-2018-13799 published?

CVE-2018-13799 was published on 2018-09-12 and last updated on 2026-06-17.

CVE-2018-13799

CVE-2018-13799 is a critical-severity vulnerability in Siemens Simatic Wincc Open Architecture with a CVSS 3.x base score of 9.1. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-269.

Key facts

Severity: Critical (CVSS 3.x base score 9.1)
CVSS v2: 6.4
EPSS exploit prediction: 2% (81st percentile)
Actively exploited: Not listed in CISA KEV
Weakness: CWE-269
Affected product: Siemens Simatic Wincc Open Architecture
Published: 2018-09-12
Last modified: 2026-06-17

Description

A vulnerability has been identified in SIMATIC WinCC OA V3.14 and prior (All versions < V3.14-P021). Improper access control to a data point of the affected product could allow an unauthenticated remote user to escalate its privileges in the context of SIMATIC WinCC OA V3.14. This vulnerability could be exploited by an attacker with network access to port 5678/TCP of the SIMATIC WinCC OA V3.14 server. Successful exploitation requires no user privileges and no user interaction. This vulnerability could allow an attacker to compromise integrity and availability of the SIMATIC WinCC OA system. At the time of advisory publication no public exploitation of this vulnerability was known.

Frequently asked questions

What is CVE-2018-13799?: A vulnerability has been identified in SIMATIC WinCC OA V3.14 and prior (All versions < V3.14-P021). Improper access control to a data point of the affected product could allow an unauthenticated remote user to escalate its privileges in the context of SIMATIC WinCC OA V3.14. This vulnerability could be exploited by an attacker with network access to port 5678/TCP of the SIMATIC WinCC OA V3.14 server. Successful exploitation requires no user privileges and no user interaction. This vulnerability could allow an attacker to compromise integrity and availability of the SIMATIC WinCC OA system. At the time of advisory publication no public exploitation of this vulnerability was known.
How severe is CVE-2018-13799?: CVE-2018-13799 has a CVSS 3.x base score of 9.1, rated critical severity. It is exploitable over network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is none, integrity high, and availability high.
Is CVE-2018-13799 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 2% (81st percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2018-13799?: CVE-2018-13799 affects Siemens Simatic Wincc Open Architecture. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2018-13799?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.
When was CVE-2018-13799 published?: CVE-2018-13799 was published on 2018-09-12 and last updated on 2026-06-17.

References

Affected products (1)

cpe:2.3:o:siemens:simatic_wincc_open_architecture:*:*:*:*:*:*:*:*

More vulnerabilities in Siemens Simatic Wincc Open Architecture

CVE-2018-3991 — Critical (CVSS 10.0): An exploitable heap overflow vulnerability exists in the WkbProgramLow function of WibuKey Network server management,…
CVE-2014-1697 — High (CVSS 7.5): The integrated web server in Siemens SIMATIC WinCC OA before 3.12 P002 January allows remote attackers to execute…
CVE-2020-7580 — Medium (CVSS 6.7): A vulnerability has been identified in SIMATIC Automation Tool (All versions < V4 SP2), SIMATIC NET PC Software V14…
CVE-2019-10929 — Medium (CVSS 5.9): A vulnerability has been identified in SIMATIC CP 1626 (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC…
CVE-2014-1699 — Medium (CVSS 5.0): Siemens SIMATIC WinCC OA before 3.12 P002 January allows remote attackers to cause a denial of service…
CVE-2014-1698 — Medium (CVSS 5.0): Directory traversal vulnerability in Siemens SIMATIC WinCC OA before 3.12 P002 January allows remote attackers to read…

All CVEs affecting Siemens Simatic Wincc Open Architecture →

Other CWE-269 (Improper Privilege Management) vulnerabilities

CVE-2026-31852 — Critical (CVSS 10.0): Jellyfin is an open-source media system. The code-quality.yml GitHub Actions workflow in jellyfin/jellyfin-ios is…
CVE-2025-20282 — Critical (CVSS 10.0): A vulnerability in an internal API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to…
CVE-2025-0505 — Critical (CVSS 10.0): On Arista CloudVision systems (virtual or physical on-premise deployments), Zero Touch Provisioning can be used to gain…
CVE-2023-48418 — Critical (CVSS 10.0): In checkDebuggingDisallowed of DeviceVersionFragment.java, there is a possible way to access adb before SUW…
CVE-2023-48419 — Critical (CVSS 10.0): An attacker in the wifi vicinity of a target Google Home can spy on the victim, resulting in Elevation of Privilege
CVE-2023-31273 — Critical (CVSS 10.0): Protection mechanism failure in some Intel DCM software before version 5.2 may allow an unauthenticated user to…

Browse all CWE-269 (Improper Privilege Management) vulnerabilities →