CVE-2018-4856 Vulnerability Details

  /     /     /  

CVE-2018-4856 Metadata Quick Info

CVE Published: 03/07/2018 | CVE Updated: 17/09/2024 | CVE Year: 2018
Source: siemens | Vendor: Siemens AG | Product: SICLOCK TC100, SICLOCK TC400
Status : PUBLISHED

---

CVE-2018-4856 Description

A vulnerability has been identified in SICLOCK TC100 (All versions) and SICLOCK TC400 (All versions). An attacker with administrative access to the device\'s management interface could lock out legitimate users. Manual interaction is required to restore the access of legitimate users.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID: CWE-287
CWE Name: CWE-287: Improper Authentication
Source: Siemens AG

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).