PT-2018-16571

CVE-2018-4853

·

Published

2018-07-03

·

Updated

2019-10-09

Description by

CVSS 2.0
10
High
MetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions SICLOCK TC100 (All versions) SICLOCK TC400 (All versions)
Description A vulnerability has been identified that allows an attacker with network access to port 69/udp to modify the firmware of the device.
Recommendations For SICLOCK TC100, restrict access to port 69/udp to prevent unauthorized firmware modifications. For SICLOCK TC400, restrict access to port 69/udp to prevent unauthorized firmware modifications.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-306: Missing Authentication for Critical Function
Related identifiers
CVE-2018-4853
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com