CVE-2018-4841 Vulnerability Details

  /     /     /  

CVE-2018-4841 Metadata Quick Info

CVE Published: 29/03/2018 | CVE Updated: 17/09/2024 | CVE Year: 2018
Source: siemens | Vendor: Siemens AG | Product: TIM 1531 IRC
Status : PUBLISHED

---

CVE-2018-4841 Description

A vulnerability has been identified in TIM 1531 IRC (All versions < V1.1). A remote attacker with network access to port 80/tcp or port 443/tcp could perform administrative operations on the device without prior authentication. Successful exploitation could allow to cause a denial-of-service, or read and manipulate data as well as configuration settings of the affected device. At the stage of publishing this security advisory no public exploitation is known. Siemens provides mitigations to resolve it.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID: CWE-303
CWE Name: CWE-303: Incorrect Implementation of Authentication Algorithm
Source: Siemens AG

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).