CVE-2018-4855

Severity: medium (CVSS 6.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-07-03 · updated 2026-06-17
Weakness: CWE-311

Description

A vulnerability has been identified in SICLOCK TC100 (All versions) and SICLOCK TC400 (All versions). Unencrypted storage of passwords in the client configuration files and during network transmission could allow an attacker in a privileged position to obtain access passwords.

Affected products

Siemens Siclock Tc100 Firmware: all versions
Siemens Siclock Tc400 Firmware: all versions

References

http://www.securityfocus.com/bid/104672
https://cert-portal.siemens.com/productcert/pdf/ssa-197012.pdf
http://www.securityfocus.com/bid/104672
https://cert-portal.siemens.com/productcert/pdf/ssa-197012.pdf

Get alerted when CVE-2018-4855 or the next vulnerability affects your stack