{"id":"CVE-2018-25112","url":"https://www.cyber-defence.io/tools/cve/CVE-2018-25112","generatedAt":"2026-10-28T21:21:30.308Z","title":"An unauthenticated remote attacker may use an uncontrolled resource consumption in the IEC 61131 program of the affected products by creating large amounts of network traffic that needs to be handled by the ILC.","description":"An unauthenticated remote attacker may use an uncontrolled resource consumption in the IEC 61131 program of the affected products by creating large amounts of network traffic that needs to be handled by the ILC. This results in a Denial-of-Service of the device.","published":"2025-06-04T10:15:20.000Z","lastModified":"2026-06-17T01:54:45.000Z","status":"Deferred","sourceIdentifier":"info@cert.vde.com","cvss":{"version":"3.1","score":7.5,"severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},"cwe":["CWE-770"],"affected":[],"epss":{"score":0.00461,"percentile":0.39776,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (0.46%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[],"references":[{"url":"https://certvde.com/en/advisories/VDE-2018-012/","source":"info@cert.vde.com"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2018-25112","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}