CVE-2018-4836

Name: CVE-2018-4836
Creator: NVD / NIST
Published: 2018-01-25T14:29:00.38+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 1.84%

Last modified Jun 17, 2026

CVE-2018-4836 is a vulnerability of currently unknown severity. A vulnerability has been identified in TeleControl Server Basic < V3.1. An authenticated attacker with a low-privileged account to the TeleControl Server Basic's port 8000/tcp could escalate his privileges and perform administrative operations.. EPSS estimates a 1.84% chance of exploitation in the next 30 days.

Description

A vulnerability has been identified in TeleControl Server Basic < V3.1. An authenticated attacker with a low-privileged account to the TeleControl Server Basic's port 8000/tcp could escalate his privileges and perform administrative operations.

Metrics

EPSS Probability

1.84%

76.2th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-287

Affected Software

Vendor	Product	Versions
Siemens	Telecontrol Server Basic	< 3.1

References

http://www.securityfocus.com/bid/102897Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/102904Third Party Advisory, VDB Entry
https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-651454.pdfPatch, Vendor Advisory
http://www.securityfocus.com/bid/102897Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/102904Third Party Advisory, VDB Entry
https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-651454.pdfPatch, Vendor Advisory

Timeline

Published: Jan 25, 2018
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2018-4836?

How severe is CVE-2018-4836?

Severity scoring for CVE-2018-4836 is pending analysis. The EPSS model estimates a 1.84% probability of exploitation in the next 30 days.

How do I fix CVE-2018-4836?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2018-4836?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST