CVE-2018-13808

A vulnerability has been identified in CP 1604 (All versions), CP 1616 (All versions)

published April 17, 2019

CVSS
—
EPSS
2%
Percentile
78.0
In the wild
Unconfirmed
What it is

⚠️ Network access is the key here! An attacker connected to port 23/tcp can siphon off internal communication data from CP 1604 and CP 1616 devices. Think of this vulnerability as a sneaky eavesdropper at a conference, hidden in plain sight, listening to all the secrets being exchanged without anyone noticing. It could lead to chaos, like a scheduled speaker suddenly missing from the lineup, causing confusion and disruption. If exploited, an attacker could extract sensitive internal communication, potentially compromising security protocols. Worse still, they could trigger a Denial-of-Service condition, leading to outages and major disruptions for any operations relying on these devices. This could be particularly devastating for organizations relying on seamless communication.

Put simply

Think of this vulnerability as a sneaky eavesdropper at a conference, hidden in plain sight, listening to all the secrets being exchanged without anyone noticing. It could lead to chaos, like a scheduled speaker suddenly missing from the lineup, causing confusion and disruption. This vulnerability allows attackers with network access to port 23/tcp to exploit CP 1604 and CP 1616 devices, leading to data extraction or a Denial-of-Service condition. Successful exploitation requires direct network access to the vulnerable device.

What to do

If exploited, an attacker could extract sensitive internal communication, potentially compromising security protocols. Worse still, they could trigger a Denial-of-Service condition, leading to outages and major disruptions for any operations relying on these devices. This could be particularly devastating for organizations relying on seamless communication. To mitigate this risk, ensure that access to port 23/tcp is restricted or disabled entirely if it's not in use. Additionally, consider implementing network segmentation to isolate these devices from unauthorized access. You've got this! By taking these steps, you'll be a security hero, keeping your communications safe and sound. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01769 · 78.0th percentile
Published
2019-04-17T13:38Z
EPSS history
Timeline
  • 17 APR 13:38Z
    A vulnerability has been identified in CP 1604 (All versions), CP 1616 (All versions)
    cvelistv5