CVE-2018-4855

A vulnerability has been identified in SICLOCK TC100 (All versions) and SICLOCK TC400 (All versions). Unencrypted storage of passwords in the client configuration files and during network transmission could allow an attacker in a privileged position to obtain access passwords.

Score

CVSS 3.0 6.5 Medium

Status

Modified - productcert@siemens.com

Published

2018-07-03

Last modified

2024-09-17

Weaknesses

CWE-311

Affected products

• Siclock Tc100 Firmware (Siemens)
• Siclock Tc400 Firmware (Siemens)
• Siclock Tc100 (Siemens Ag)
• Siclock Tc400 (Siemens Ag)

References

• http://www.securityfocus.com/bid/104672
• https://cert-portal.siemens.com/productcert/pdf/ssa-197012.pdf