Siemens Siclock Tc400 vulnerabilities
6 vulnerabilities
Known vulnerabilities in Siemens Siclock Tc400, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2018-4853siemens agsiclock tc100, siclock tc400+2
EPSS score2.27%
A vulnerability has been identified in SICLOCK TC100 (All versions) and SICLOCK TC400 (All versions). An attacker with network access to port 69/udp could modify the firmware of the device.CVE-2018-4851siemens agsiclock tc100, siclock tc400+2EPSS score1.46%
A vulnerability has been identified in SICLOCK TC100 (All versions) and SICLOCK TC400 (All versions). An attacker with network access to the device could cause a Denial-of-Service condition by sending certain packets to the device, causing potential reboots of the device. The core functionality of the device could be impacted. The time serving functionality recovers when time synchronization with GPS devices or other NTP servers are completed.CVE-2018-4856siemens agsiclock tc100, siclock tc400+2EPSS score1.28%
A vulnerability has been identified in SICLOCK TC100 (All versions) and SICLOCK TC400 (All versions). An attacker with administrative access to the device's management interface could lock out legitimate users. Manual interaction is required to restore the access of legitimate users.CVE-2018-4854siemens agsiclock tc100, siclock tc400+2EPSS score2.54%
A vulnerability has been identified in SICLOCK TC100 (All versions) and SICLOCK TC400 (All versions). An attacker with network access to port 69/udp could modify the administrative client stored on the device. If a legitimate user downloads and executes the modified client from the affected device, then he/she could obtain code execution on the client system.CVE-2018-4852siemens agsiclock tc100, siclock tc400+2EPSS score2.69%
A vulnerability has been identified in SICLOCK TC100 (All versions) and SICLOCK TC400 (All versions). An attacker with network access to the device could potentially circumvent the authentication mechanism if he/she is able to obtain certain knowledge specific to the attacked device.CVE-2018-4855siemens agsiclock tc100, siclock tc400+2EPSS score1.01%
A vulnerability has been identified in SICLOCK TC100 (All versions) and SICLOCK TC400 (All versions). Unencrypted storage of passwords in the client configuration files and during network transmission could allow an attacker in a privileged position to obtain access passwords.