PT-2018-16574 · Siemens · Siclock Tc400+1

Publicado 2018-07-03 · Atualizado 2019-10-09 · CVE-2018-4856

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Média

Vetor base

AV:N/AC:L/Au:S/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions SICLOCK TC100 (All versions) SICLOCK TC400 (All versions)

Description A vulnerability has been identified that allows an attacker with administrative access to the device's management interface to lock out legitimate users, requiring manual interaction to restore access.

Recommendations For SICLOCK TC100 (All versions), restrict access to the management interface to prevent unauthorized administrative access. For SICLOCK TC400 (All versions), restrict access to the management interface to prevent unauthorized administrative access.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2018-4856

Produtos afetados

Siclock Tc100

Siclock Tc400

Referências · 3

• http://securityfocus.com/bid/104672 · Nota
• https://cert-portal.siemens.com/productcert/pdf/ssa-197012.pdf · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-4856 · Nota de Segurança