CVE-2018-4841: siemens ag tim 1531 irc
Vulnerability summary
CVE-2018-4841 is a high (CVSS 10.0) vulnerability in siemens ag tim 1531 irc. EPSS estimates a 4.73% chance of exploitation in the next 30 days, higher than 91.7% of scored vulnerabilities.
Timeline
- 29-03-2018PublishedVulnerability first disclosed.
- 17-09-2024Last modifiedVulnerability information updated.
Description
A vulnerability has been identified in TIM 1531 IRC (All versions < V1.1). A remote attacker with network access to port 80/tcp or port 443/tcp could perform administrative operations on the device without prior authentication. Successful exploitation could allow to cause a denial-of-service, or read and manipulate data as well as configuration settings of the affected device. At the stage of publishing this security advisory no public exploitation is known. Siemens provides mitigations to resolve it.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
4.73%
Chance of exploitation in the next 30 days
Percentile
92%
Versus all other CVEs
30-day change
0.00 pp
From 4.73% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root cause- CWE-303Incorrect Implementation of Authentication AlgorithmThe requirements for the product dictate the use of an established authentication algorithm, but the implementation of the algorithm is incorrect.
- CWE-287Improper AuthenticationWhen an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
Affected systems
Siemens1 product
Siemens ag1 product
- tim 1531 ircAll versions < V1.1
2 vendors · 2 products