CVE-2018-4852 A vulnerability has been identified in SICLOCK TC100 (All versions) and SICLOCK TC400 (All versions). An attacker with network access to the device could potentially circumvent the authentication mech...
CriticalCVSS 9.8
EPSS 2.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A vulnerability has been identified in SICLOCK TC100 (All versions) and SICLOCK TC400 (All versions). An attacker with network access to the device could potentially circumvent the authentication mechanism if he/she is able to obtain certain knowledge specific to the attacked device.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Siemens siclock tc400 firmware | All versions | No fix listed |
| Siemens siclock tc100 firmware | All versions | No fix listed |
| Siemens SICLOCK TC100, SICLOCK TC400 | = SICLOCK TC100 : All versions | No fix listed |
| Siemens SICLOCK TC100, SICLOCK TC400 | = SICLOCK TC400 : All versions | No fix listed |
References
- 104672 third-party-advisory vdb-entry
- cert-portal.siemens.com mitigation vendor-advisory