CVE-2018-4856

A vulnerability has been identified in SICLOCK TC100 (All versions) and SICLOCK TC400 (All versions). An attacker with administrative access to the device's management interface could lock out legitimate users. Manual interaction is required to restore the access of legitimate users.

Score

CVSS 3.0 4.9 Medium

Status

Modified - productcert@siemens.com

Published

2018-07-03

Last modified

2024-09-17

Weaknesses

CWE-287

Affected products

• Siclock Tc100 Firmware (Siemens)
• Siclock Tc400 Firmware (Siemens)
• Siclock Tc100 (Siemens Ag)
• Siclock Tc400 (Siemens Ag)

References

• http://www.securityfocus.com/bid/104672
• https://cert-portal.siemens.com/productcert/pdf/ssa-197012.pdf