CVE-2018-4855

Name of the Vulnerable Software and Affected Versions SICLOCK TC100 (All versions) SICLOCK TC400 (All versions)

Description A vulnerability has been identified that involves the unencrypted storage of passwords in client configuration files and during network transmission. This could allow an attacker in a privileged position to obtain access passwords.

Recommendations For SICLOCK TC100, consider encrypting passwords in client configuration files and securing network transmission to prevent unauthorized access. For SICLOCK TC400, consider encrypting passwords in client configuration files and securing network transmission to prevent unauthorized access. As a temporary workaround, consider restricting access to the client configuration files and network transmission to minimize the risk of exploitation.