CVE-2018-4853 A vulnerability has been identified in SICLOCK TC100 (All versions) and SICLOCK TC400 (All versions). An attacker with network access to port 69/udp could modify the firmware of the device.
CriticalCVSS 9.8
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A vulnerability has been identified in SICLOCK TC100 (All versions) and SICLOCK TC400 (All versions). An attacker with network access to port 69/udp could modify the firmware of the device.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Siemens siclock tc400 firmware | All versions | No fix listed |
| Siemens siclock tc100 firmware | All versions | No fix listed |
| Siemens SICLOCK TC100, SICLOCK TC400 | = SICLOCK TC100 : All versions | No fix listed |
| Siemens SICLOCK TC100, SICLOCK TC400 | = SICLOCK TC400 : All versions | No fix listed |
References
- 104672 third-party-advisory vdb-entry
- cert-portal.siemens.com mitigation vendor-advisory