Auth bypass in Siemens Tim 1531 Irc
CVE-2018-13816
A vulnerability has been identified in TIM 1531 IRC (All version < V2.0). The devices was missing proper authentication on port 102/tcp, although configured. Successful exploitation requires an attacker to be able to send packets to port 102/tcp of the affected device. No user interaction and no user privileges are required to exploit the vulnerability. At the time of advisory publication no public exploitation of this vulnerability was known.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 10.0 (Critical). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.028 (85.9th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 86th percentile — 85.9% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.028 · newest: 0.028 · change: 0.000
Affected products
- Siemens Tim 1531 Irc
- Siemens Tim 1531 Irc Firmware
- Siemens Ag Tim 1531 Irc — versions TIM 1531 IRC : All version < V2.0
Weakness classification (CWE)
References
- cert-portal.siemens.com/productcert/pdf/ssa-982399.pdf (Vendor Advisory)
- www.securityfocus.com/bid/106194 (VDB Entry, Third Party Advisory, vdb-entry)
Frequently asked questions
- What is CVE-2018-13816?
- CVE-2018-13816 is a critical-severity vulnerability in Siemens Tim 1531 Irc, classified under Improper Access Control. CVSS score: 10.0/10. Published 2018-12-12.
- How severe is CVE-2018-13816?
- Critical severity. CVSS v3 base score is 10.0 out of 10.