PT-2018-16574 · Siemens · Siclock Tc400+1

Published 2018-07-03 · Updated 2019-10-09 · CVE-2018-4856

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions SICLOCK TC100 (All versions) SICLOCK TC400 (All versions)

Description A vulnerability has been identified that allows an attacker with administrative access to the device's management interface to lock out legitimate users, requiring manual interaction to restore access.

Recommendations For SICLOCK TC100 (All versions), restrict access to the management interface to prevent unauthorized administrative access. For SICLOCK TC400 (All versions), restrict access to the management interface to prevent unauthorized administrative access.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2018-4856

Affected Products

Siclock Tc100

Siclock Tc400

References · 3

• https://cert-portal.siemens.com/productcert/pdf/ssa-197012.pdf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-4856 · Security Note
• http://securityfocus.com/bid/104672 · Note