CVE-2018-4854

Name of the Vulnerable Software and Affected Versions SICLOCK TC100 (All versions) SICLOCK TC400 (All versions)

Description A vulnerability has been identified that allows an attacker with network access to port 69/udp to modify the administrative client stored on the device. If a legitimate user downloads and executes the modified client from the affected device, the attacker could obtain code execution on the client system.

Recommendations For SICLOCK TC100, restrict access to port 69/udp to minimize the risk of exploitation. For SICLOCK TC400, restrict access to port 69/udp to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.