CVE-2018-13816
moderate-risk
Published 2018-12-12
A vulnerability has been identified in TIM 1531 IRC (All version < V2.0). The devices was missing proper authentication on port 102/tcp, although configured. Successful exploitation requires an attacker to be able to send packets to port 102/tcp of the affected device. No user interaction and no user privileges are required to exploit the vulnerability. At the time of advisory publication no public exploitation of this vulnerability was known.
Do I need to act?
~
2.9% chance of exploitation in next 30 days
EPSS score — moderate exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
10
CVSS 10.0/10
Critical
NETWORK
/ LOW complexity
Affected Products (1)
Tim 1531 Irc Firmware
Affected Vendors
References (4)
Third Party Advisory
http://www.securityfocus.com/bid/106194
Vendor Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-982399.pdf
Third Party Advisory
http://www.securityfocus.com/bid/106194
Vendor Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-982399.pdf
44
/ 100
moderate-risk
Severity
33/34 · Critical
Exploitability
6/34 · Minimal
Exposure
5/34 · Minimal