Siemens Siclock TC400 Firmware vulnerabilities

6 CVEs affecting Siemens Siclock TC400 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-4856, published 2018-07-03.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-4852, published 2018-07-03. Critical severity, CVSS 9.8. EPSS: 2.7% chance of exploitation in the next 30 days. A vulnerability has been identified in SICLOCK TC100 (All versions) and SICLOCK TC400 (All versions). An attacker with network access to the device could potentially circumvent the authentication…
CVE-2018-4854, published 2018-07-03. High severity, CVSS 8.8. EPSS: 2.5% chance of exploitation in the next 30 days. A vulnerability has been identified in SICLOCK TC100 (All versions) and SICLOCK TC400 (All versions). An attacker with network access to port 69/udp could modify the administrative client stored on…
CVE-2018-4853, published 2018-07-03. Critical severity, CVSS 9.8. EPSS: 2.3% chance of exploitation in the next 30 days. A vulnerability has been identified in SICLOCK TC100 (All versions) and SICLOCK TC400 (All versions). An attacker with network access to port 69/udp could modify the firmware of the device.
CVE-2018-4851, published 2018-07-03. High severity, CVSS 8.2. EPSS: 1.5% chance of exploitation in the next 30 days. A vulnerability has been identified in SICLOCK TC100 (All versions) and SICLOCK TC400 (All versions). An attacker with network access to the device could cause a Denial-of-Service condition by…
CVE-2018-4856, published 2018-07-03. Medium severity, CVSS 4.9. EPSS: 1.3% chance of exploitation in the next 30 days. A vulnerability has been identified in SICLOCK TC100 (All versions) and SICLOCK TC400 (All versions). An attacker with administrative access to the device's management interface could lock out…
CVE-2018-4855, published 2018-07-03. Medium severity, CVSS 6.5. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability has been identified in SICLOCK TC100 (All versions) and SICLOCK TC400 (All versions). Unencrypted storage of passwords in the client configuration files and during network…