VULNERABILITY INTELLIGENCE

CVE-2018-4856

CVSS score4.9 MEDIUM

EPSS probability1.28%

CISA KEVNot currently listed

Published2018-07-03

Last modified2026-06-17

CVSS vectorCVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Description

A vulnerability has been identified in SICLOCK TC100 (All versions) and SICLOCK TC400 (All versions). An attacker with administrative access to the device's management interface could lock out legitimate users. Manual interaction is required to restore the access of legitimate users.

Weakness classification

CWE-287: Improper Authentication

Primary references

productcert@siemens.com — Third Party Advisory, VDB Entry
productcert@siemens.com — Mitigation, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Mitigation, Vendor Advisory