CVE-2018-4851

Severity: high (CVSS 8.2 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-07-03 · updated 2026-06-17
Weakness: CWE-399

Description

A vulnerability has been identified in SICLOCK TC100 (All versions) and SICLOCK TC400 (All versions). An attacker with network access to the device could cause a Denial-of-Service condition by sending certain packets to the device, causing potential reboots of the device. The core functionality of the device could be impacted. The time serving functionality recovers when time synchronization with GPS devices or other NTP servers are completed.

Affected products

Siemens Siclock Tc100 Firmware: all versions
Siemens Siclock Tc400 Firmware: all versions

References

http://www.securityfocus.com/bid/104672
https://cert-portal.siemens.com/productcert/pdf/ssa-197012.pdf
http://www.securityfocus.com/bid/104672
https://cert-portal.siemens.com/productcert/pdf/ssa-197012.pdf

Get alerted when CVE-2018-4851 or the next vulnerability affects your stack