CVE-2018-4856

Severity: medium (CVSS 4.9 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-07-03 · updated 2026-06-17
Weakness: CWE-287

Description

A vulnerability has been identified in SICLOCK TC100 (All versions) and SICLOCK TC400 (All versions). An attacker with administrative access to the device's management interface could lock out legitimate users. Manual interaction is required to restore the access of legitimate users.

Affected products

Siemens Siclock Tc100 Firmware: all versions
Siemens Siclock Tc400 Firmware: all versions

References

http://www.securityfocus.com/bid/104672
https://cert-portal.siemens.com/productcert/pdf/ssa-197012.pdf
http://www.securityfocus.com/bid/104672
https://cert-portal.siemens.com/productcert/pdf/ssa-197012.pdf

Get alerted when CVE-2018-4856 or the next vulnerability affects your stack