CVE-2018-13816
A vulnerability has been identified in TIM 1531 IRC (All version < V2.0).
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (2.80%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
A vulnerability has been identified in TIM 1531 IRC (All version < V2.0). The devices was missing proper authentication on port 102/tcp, although configured. Successful exploitation requires an attacker to be able to send packets to port 102/tcp of the affected device. No user interaction and no user privileges are required to exploit the vulnerability. At the time of advisory publication no public exploitation of this vulnerability was known.
- CVSS 3.0
- 10.0 CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
- EPSS
- 2.80% probability · 86th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-284, CWE-287
- Affected
- siemens/tim 1531 irc firmware
- Source
- productcert@siemens.com
References
- http://www.securityfocus.com/bid/106194Third Party Advisory, VDB Entry
- https://cert-portal.siemens.com/productcert/pdf/ssa-982399.pdfVendor Advisory
- http://www.securityfocus.com/bid/106194Third Party Advisory, VDB Entry
- https://cert-portal.siemens.com/productcert/pdf/ssa-982399.pdfVendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.