CVE-2018-4841
Last modified
CVE-2018-4841 is a critical-severity vulnerability rated 9.8/10 on the CVSS scale. A vulnerability has been identified in TIM 1531 IRC (All versions < V1.1). A remote attacker with network access to port 80/tcp or port 443/tcp could perform administrative operations on the device without prior authentication. EPSS estimates a 4.93% chance of exploitation in the next 30 days.
Description
A vulnerability has been identified in TIM 1531 IRC (All versions < V1.1). A remote attacker with network access to port 80/tcp or port 443/tcp could perform administrative operations on the device without prior authentication. Successful exploitation could allow to cause a denial-of-service, or read and manipulate data as well as configuration settings of the affected device. At the stage of publishing this security advisory no public exploitation is known. Siemens provides mitigations to resolve it.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Siemens | Tim 1531 Irc Firmware | < 1.1 |
References
- http://www.securityfocus.com/bid/103576Broken Link, Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/103576Broken Link, Third Party Advisory, VDB Entry
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2018-4841?
How severe is CVE-2018-4841?
How do I fix CVE-2018-4841?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2018
- CVE-2018-4835A vulnerability has been identified in TeleControl Server Ba…
- CVE-2018-4836A vulnerability has been identified in TeleControl Server Ba…
- CVE-2018-4837A vulnerability has been identified in TeleControl Server Ba…
- CVE-2018-4838A vulnerability has been identified in EN100 Ethernet module…
- CVE-2018-4839A vulnerability has been identified in DIGSI 4 (All versions…
- CVE-2018-4840A vulnerability has been identified in DIGSI 4 (All versions…
- CVE-2018-4842A vulnerability has been identified in SCALANCE X-200IRT swi…
- CVE-2018-4843A vulnerability has been identified in SIMATIC S7-400 CPU 4…6.5
- CVE-2018-4844A vulnerability has been identified in SIMATIC WinCC OA UI f…6.7
- CVE-2018-4845A vulnerability has been identified in RAPIDLab 1200 systems…8.8
- CVE-2018-4846A vulnerability has been identified in RAPIDLab 1200 systems…
- CVE-2018-4847A vulnerability has been identified in SIMATIC WinCC OA Oper…
Are you affected by CVE-2018-4841?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST