Auth bypass in Siemens Tim 1531 Irc
CVE-2018-13816
A vulnerability has been identified in TIM 1531 IRC (All version < V2.0). The devices was missing proper authentication on port 102/tcp, although configured. Successful exploitation requires an attacker to be able to send packets to port 102/tcp of the affected device. No user interaction and no user privileges are required to exploit the vulnerability. At the time of advisory publication no public exploitation of this vulnerability was known.
EPSS: 0.028 (85.0th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 10.0 (Critical). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H.
Affected products
- Siemens Tim_1531_irc
- Siemens Tim_1531_irc_firmware
- Siemens Ag Tim 1531 Irc — versions TIM 1531 IRC : All version < V2.0
Weakness classification (CWE)
References
- productcert@siemens.com (x_refsource_CONFIRM, Vendor Advisory)
- productcert@siemens.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
Frequently asked questions
- What is CVE-2018-13816?
- CVE-2018-13816 is a critical-severity vulnerability in Siemens Tim 1531 Irc, classified under Improper Access Control. CVSS score: 10.0/10. Published 2018-12-12.
- How severe is CVE-2018-13816?
- Critical severity. CVSS v3 base score is 10.0 out of 10.