VULNERABILITY INTELLIGENCE

CVE-2018-13816

CVSS score10 CRITICAL

EPSS probability2.80%

CISA KEVNot currently listed

Published2018-12-12

Last modified2026-06-17

CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Description

A vulnerability has been identified in TIM 1531 IRC (All version < V2.0). The devices was missing proper authentication on port 102/tcp, although configured. Successful exploitation requires an attacker to be able to send packets to port 102/tcp of the affected device. No user interaction and no user privileges are required to exploit the vulnerability. At the time of advisory publication no public exploitation of this vulnerability was known.

Weakness classification

CWE-284: Improper Access Control
CWE-287: Improper Authentication

Primary references

productcert@siemens.com — Third Party Advisory, VDB Entry
productcert@siemens.com — Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory