Auth bypass in Siemens Tim 1531 Irc
CVE-2018-4841
A vulnerability has been identified in TIM 1531 IRC (All versions < V1.1). A remote attacker with network access to port 80/tcp or port 443/tcp could perform administrative operations on the device without prior authentication. Successful exploitation could allow to cause a denial-of-service, or read and manipulate data as well as configuration settings of the affected device. At the stage of publishing this security advisory no public exploitation is known. Siemens provides mitigations to resolve it.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.047 (91.5th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 92nd percentile — 91.5% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.048 · newest: 0.047 · change: -0.000
Affected products
- Siemens Tim 1531 Irc
- Siemens Tim 1531 Irc Firmware
- Siemens Ag Tim 1531 Irc — versions All versions < V1.1
Weakness classification (CWE)
References
- cert-portal.siemens.com/productcert/pdf/ssa-110922.pdf (Vendor Advisory)
- www.securityfocus.com/bid/103576 (VDB Entry, Third Party Advisory, vdb-entry, Broken Link)
Frequently asked questions
- What is CVE-2018-4841?
- CVE-2018-4841 is a critical-severity vulnerability in Siemens Tim 1531 Irc, classified under Incorrect Implementation of Authentication Algorithm. CVSS score: 9.8/10. Published 2018-03-29.
- How severe is CVE-2018-4841?
- Critical severity. CVSS v3 base score is 9.8 out of 10.