Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
e of publishing this security advisory no public exploitation is known. Siemens provides mitigations to resolve it. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-110922.pdf - http://www.securityfocus.com/bid/103576
CVE ID: CVE-2018-4842 State: PUBLISHED Published: 2018-06-14T00:00:00 Last Updated: 2024-08-05T05:18:26.218Z Vendors: Siemens Products: SCALANCE X-200IRT switch family (incl. SIPLUS NET variants), SCALANCE X-200RNA switch family, SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants) Problem Types: CWE-79 Description: A vulnerability has been identified in SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.4.1), SCALANCE X-200RNA switch family (All versions < V3.2.7), SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants) (All versions < V4.1.3). A remote, authenticated attacker with access to the configuration web server could be able to sto
ll versions < V4.1.3). A remote, authenticated attacker with access to the configuration web server could be able to store script code on the web site, if the HRP redundancy option is set. This code could be executed in the web browser of victims visiting this web site (XSS), affecting its confidentiality, integrity and availability. User interaction is required for successful exploitation, as the user needs to visit the manipulated web site. At the stage of publishing this security advisory no public exploitation is known. The vendor has confirmed the vulnerability and provides mitigations to resolve it. Additional Analyst Notes: - CVE Program Container: References: - https://www.securityfo
vides mitigations to resolve it. Additional Analyst Notes: - CVE Program Container: References: - https://www.securityfocus.com/bid/104494 - https://cert-portal.siemens.com/productcert/pdf/ssa-480829.pdf
CVE ID: CVE-2018-4843 State: PUBLISHED Published: 2018-03-20T14:00:00 Last Updated: 2024-08-05T05:18:26.626Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: SIMATIC S7-400 CPU 414-3 PN/DP V7, SIMATIC S7-400 CPU 414F-3 PN/DP V7, SIMATIC S7-400 CPU 416-3 PN/DP V7, SIMATIC S7-400 CPU 416F-3 PN/DP V7, SIMATIC CP 343-1 (incl. SIPLUS variants), SIMATIC CP 343-1 Advanced (incl. SIPLUS variants), SIMATIC CP 443-1, SIMATIC CP 443-1 Advanced, SIMATIC ET 200pro IM154-8 PN/DP CPU, SIMATIC ET 200pro IM154-8F PN/DP CPU, SIMATIC ET 200pro IM154-8FX PN/DP CPU, SIMATIC ET 200S IM151-8 PN/DP CPU, SIMATIC ET 200S IM151-8F PN/DP CPU, SIMATIC S7-1
MATIC ET 200pro IM154-8FX PN/DP CPU, SIMATIC ET 200S IM151-8 PN/DP CPU, SIMATIC ET 200S IM151-8F PN/DP CPU, SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants), SIMATIC S7-1500 Software Controller, SIMATIC S7-300 CPU 314C-2 PN/DP, SIMATIC S7-300 CPU 315-2 PN/DP, SIMATIC S7-300 CPU 315F-2 PN/DP, SIMATIC S7-300 CPU 315T-3 PN/DP, SIMATIC S7-300 CPU 317-2 PN/DP, SIMATIC S7-300 CPU 317F-2 PN/DP, SIMATIC S7-300 CPU 317T-3 PN/DP, SIMATIC S7-300 CPU 317TF-3 PN/DP, SIMATIC S7-300 CPU 319-3 PN/DP, SIMATIC S7-300 CPU 319F-3 PN/DP, SIMATIC S7-400 CPU 412-2 PN V7, SIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants), SIMATIC S7-400 PN/DP V6 CPU family (incl. SIPLUS variants), SIMA
SIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants), SIMATIC S7-400 PN/DP V6 CPU family (incl. SIPLUS variants), SIMATIC S7-410 CPU family (incl. SIPLUS variants), SIMATIC WinAC RTX 2010, SIMATIC WinAC RTX F 2010, SINUMERIK 828D, SIPLUS ET 200S IM151-8 PN/DP CPU, SIPLUS ET 200S IM151-8F PN/DP CPU, SIPLUS NET CP 443-1, SIPLUS NET CP 443-1 Advanced, SIPLUS S7-300 CPU 314C-2 PN/DP, SIPLUS S7-300 CPU 315-2 PN/DP, SIPLUS S7-300 CPU 315F-2 PN/DP, SIPLUS S7-300 CPU 317-2 PN/DP, SIPLUS S7-300 CPU 317F-2 PN/DP, SIPLUS S7-400 CPU 414-3 PN/DP V7, SIPLUS S7-400 CPU 416-3 PN/DP V7, Softnet PROFINET IO for PC-based Windows systems Problem Types: CWE-20 Description: A vulnerability has been identified i
oftnet PROFINET IO for PC-based Windows systems Problem Types: CWE-20 Description: A vulnerability has been identified in SIMATIC S7-400 CPU 414-3 PN/DP V7 (All versions < V7.0.3), SIMATIC S7-400 CPU 414F-3 PN/DP V7 (All versions < V7.0.3), SIMATIC S7-400 CPU 416-3 PN/DP V7 (All versions < V7.0.3), SIMATIC S7-400 CPU 416F-3 PN/DP V7 (All versions < V7.0.3), SIMATIC CP 343-1 (incl. SIPLUS variants) (All versions), SIMATIC CP 343-1 Advanced (incl. SIPLUS variants) (All versions), SIMATIC CP 443-1 (All versions < V3.3), SIMATIC CP 443-1 (All versions < V3.3), SIMATIC CP 443-1 Advanced (All versions < V3.3), SIMATIC ET 200pro IM154-8 PN/DP CPU (All versions < V3.2.16), SIMATIC ET 200pro IM154-8F
Advanced (All versions < V3.3), SIMATIC ET 200pro IM154-8 PN/DP CPU (All versions < V3.2.16), SIMATIC ET 200pro IM154-8F PN/DP CPU (All versions < V3.2.16), SIMATIC ET 200pro IM154-8FX PN/DP CPU (All versions < V3.2.16), SIMATIC ET 200S IM151-8 PN/DP CPU (All versions < V3.2.16), SIMATIC ET 200S IM151-8F PN/DP CPU (All versions < V3.2.16), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions < V1.7.0), SIMATIC S7-1500 Software Controller (All versions < V1.7.0), SIMATIC S7-300 CPU 314C-2 PN/DP (All versions < V3.3.16), SIMATIC S7-300 CPU 315-2 PN/DP (All versions < V3.2.16), SIMATIC S7-300 CPU 315F-2 PN/DP (All versions < V3.2.16), SIMATIC S7-300 CPU 315T-3
15-2 PN/DP (All versions < V3.2.16), SIMATIC S7-300 CPU 315F-2 PN/DP (All versions < V3.2.16), SIMATIC S7-300 CPU 315T-3 PN/DP (All versions < V3.2.16), SIMATIC S7-300 CPU 317-2 PN/DP (All versions < V3.2.16), SIMATIC S7-300 CPU 317F-2 PN/DP (All versions < V3.2.16), SIMATIC S7-300 CPU 317T-3 PN/DP (All versions < V3.2.16), SIMATIC S7-300 CPU 317TF-3 PN/DP (All versions < V3.2.16), SIMATIC S7-300 CPU 319-3 PN/DP (All versions < V3.2.16), SIMATIC S7-300 CPU 319F-3 PN/DP (All versions < V3.2.16), SIMATIC S7-400 CPU 412-2 PN V7 (All versions < V7.0.3), SIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants) (All versions < V6.0.9), SIMATIC S7-400 PN/DP V6 CPU family (incl. SIPLUS variants) (All
family (incl. SIPLUS variants) (All versions < V6.0.9), SIMATIC S7-400 PN/DP V6 CPU family (incl. SIPLUS variants) (All versions < V6.0.7), SIMATIC S7-410 CPU family (incl. SIPLUS variants) (All versions < V8.1), SIMATIC WinAC RTX 2010 (All versions < V2010 SP3), SIMATIC WinAC RTX F 2010 (All versions < V2010 SP3), SINUMERIK 828D (All versions < V4.7 SP6 HF1), SIPLUS ET 200S IM151-8 PN/DP CPU (All versions < V3.2.16), SIPLUS ET 200S IM151-8F PN/DP CPU (All versions < V3.2.16), SIPLUS NET CP 443-1 (All versions < V3.3), SIPLUS NET CP 443-1 Advanced (All versions < V3.3), SIPLUS S7-300 CPU 314C-2 PN/DP (All versions < V3.3.16), SIPLUS S7-300 CPU 315-2 PN/DP (All versions < V3.2.16), SIPLUS S7-
LUS S7-300 CPU 314C-2 PN/DP (All versions < V3.3.16), SIPLUS S7-300 CPU 315-2 PN/DP (All versions < V3.2.16), SIPLUS S7-300 CPU 315F-2 PN/DP (All versions < V3.2.16), SIPLUS S7-300 CPU 317-2 PN/DP (All versions < V3.2.16), SIPLUS S7-300 CPU 317F-2 PN/DP (All versions < V3.2.16), SIPLUS S7-400 CPU 414-3 PN/DP V7 (All versions < V7.0.3), SIPLUS S7-400 CPU 416-3 PN/DP V7 (All versions < V7.0.3), Softnet PROFINET IO for PC-based Windows systems (All versions). Responding to a PROFINET DCP request with a specially crafted PROFINET DCP packet could cause a denial of service condition of the requesting system. The security vulnerability could be exploited by an attacker located on the same Ethernet
tion of the requesting system. The security vulnerability could be exploited by an attacker located on the same Ethernet segment (OSI Layer 2) as the targeted device. A manual restart is required to recover the system. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-592007.pdf
CVE ID: CVE-2018-4844 State: PUBLISHED Published: 2018-03-20T14:00:00Z Last Updated: 2024-09-17T03:12:54.178Z Vendors: Siemens AG Products: SIMATIC WinCC OA UI for Android, SIMATIC WinCC OA UI for iOS Problem Types: CWE-284 Description: A vulnerability has been identified in SIMATIC WinCC OA UI for Android (All versions < V3.15.10), SIMATIC WinCC OA UI for iOS (All versions < V3.15.10). Insufficient limitation of CONTROL script capabilities could allow read and write access from one HMI project cache folder to other HMI project cache folders within the app's sandbox on the same mobile device. This includes HMI project cache folders of other configured WinCC OA servers. The security vulnerabi
same mobile device. This includes HMI project cache folders of other configured WinCC OA servers. The security vulnerability could be exploited by an attacker who tricks an app user to connect to an attacker-controlled WinCC OA server. Successful exploitation requires user interaction and read/write access to the app's folder on a mobile device. The vulnerability could allow reading data from and writing data to the app's folder. At the time of advisory publication no public exploitation of this security vulnerability was known. Siemens confirms the security vulnerability and provides mitigations to resolve the security issue. Additional Analyst Notes: - CVE Program Container: References: -
nd provides mitigations to resolve the security issue. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-822928.pdf - http://www.securityfocus.com/bid/103475
CVE ID: CVE-2018-4845 State: PUBLISHED Published: 2018-06-26T18:00:00Z Last Updated: 2024-09-16T18:55:43.476Z Vendors: Siemens AG Products: RAPIDLab 1200 systems / RAPIDPoint 400 systems / RAPIDPoint 500 systems, RAPIDLab 1200 Series, RAPIDPoint 500 systems, RAPIDPoint 500 systems, RAPIDPoint 500 systems, RAPIDPoint 400 systems Problem Types: CWE-284 Description: A vulnerability has been identified in RAPIDLab 1200 systems / RAPIDPoint 400 systems / RAPIDPoint 500 systems (All versions_without_ use of Siemens Healthineers Informatics products), RAPIDLab 1200 Series (All versions < V3.3 _with_ Siemens Healthineers Informatics products), RAPIDPoint 500 systems (All versions >= V3.0 _with_ Siem
sions < V3.3 _with_ Siemens Healthineers Informatics products), RAPIDPoint 500 systems (All versions >= V3.0 _with_ Siemens Healthineers Informatics products), RAPIDPoint 500 systems (V2.4.X_with_ Siemens Healthineers Informatics products), RAPIDPoint 500 systems (All versions =< V2.3 _with_ Siemens Healthineers Informatics products), RAPIDPoint 400 systems (All versions _with_ Siemens Healthineers Informatics products). Remote attackers with either local or remote credentialed access to the "Remote View" feature might be able to elevate their privileges, compromising confidentiality, integrity, and availability of the system. No special skills or user interaction are required to perform thi
dentiality, integrity, and availability of the system. No special skills or user interaction are required to perform this attack. At the time of advisory publication, no public exploitation of this security vulnerability is known. Siemens Healthineers confirms the security vulnerability and provides mitigations to resolve the security issue. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-755010.pdf
CVE ID: CVE-2018-4846 State: PUBLISHED Published: 2018-06-26T18:00:00Z Last Updated: 2024-09-17T01:01:45.175Z Vendors: Siemens AG Products: RAPIDLab 1200 systems RAPIDPoint 400 systems RAPIDPoint 500 systems RAPIDLab 1200 Series RAPIDPoint 500 systems RAPIDPoint 500 systems RAPIDPoint 500 systems RAPIDPoint 400 systems Problem Types: CWE-798 Description: A vulnerability has been identified in RAPIDLab 1200 systems / RAPIDPoint 400 systems / RAPIDPoint 500 systems (All versions_without_ use of Siemens Healthineers Informatics products), RAPIDLab 1200 Series (All versions < V3.3 _with_ Siemens Healthineers Informatics products), RAPIDPoint 500 systems (All versions >= V3.0 _with_ Siemens Healt
3.3 _with_ Siemens Healthineers Informatics products), RAPIDPoint 500 systems (All versions >= V3.0 _with_ Siemens Healthineers Informatics products), RAPIDPoint 500 systems (V2.4.X_with_ Siemens Healthineers Informatics products), RAPIDPoint 500 systems (All versions =< V2.3 _with_ Siemens Healthineers Informatics products), RAPIDPoint 400 systems (All versions _with_ Siemens Healthineers Informatics products). A factory account with hardcoded password might allow attackers access to the device over port 5900/tcp. Successful exploitation requires no user interaction or privileges and impacts the confidentiality, integrity, and availability of the affected device. At the time of advisory pub
vileges and impacts the confidentiality, integrity, and availability of the affected device. At the time of advisory publication, no public exploitation of this security vulnerability is known. Siemens Healthineers confirms the security vulnerability and provides mitigations to resolve the security issue. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-755010.pdf
CVE ID: CVE-2018-4847 State: PUBLISHED Published: 2018-04-23T16:00:00Z Last Updated: 2024-09-17T02:57:39.805Z Vendors: Siemens AG Products: SIMATIC WinCC OA Operator iOS App Problem Types: CWE-538 Description: A vulnerability has been identified in SIMATIC WinCC OA Operator iOS App (All versions < V1.4). Insufficient protection of sensitive information (e.g. session key for accessing server) in Siemens WinCC OA Operator iOS app could allow an attacker with physical access to the mobile device to read unencrypted data from the app's directory. Siemens provides mitigations to resolve the security issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.c
resolve the security issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103941 - https://cert-portal.siemens.com/productcert/pdf/ssa-597741.pdf
CVE ID: CVE-2018-4848 State: PUBLISHED Published: 2018-06-14T00:00:00 Last Updated: 2024-08-05T05:18:26.424Z Vendors: Siemens Products: SCALANCE X-200 switch family (incl. SIPLUS NET variants), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants), SCALANCE X-200RNA switch family, SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants) Problem Types: CWE-80 Description: A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.3), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.4.1), SCALANCE X-200RNA switch family (All versions < V3.2.7), SCALANCE X-300 switch family (incl. X408 and SIP
ons < V5.4.1), SCALANCE X-200RNA switch family (All versions < V3.2.7), SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants) (All versions < V4.1.3). The integrated configuration web server of the affected devices could allow Cross-Site Scripting (XSS) attacks if unsuspecting users are tricked into accessing a malicious link. User interaction is required for a successful exploitation. The user must be logged into the web interface in order for the exploitation to succeed. At the stage of publishing this security advisory no public exploitation is known. The vendor has confirmed the vulnerability and provides mitigations to resolve it. Additional Analyst Notes: - CVE Program Cont
dor has confirmed the vulnerability and provides mitigations to resolve it. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104494 - https://cert-portal.siemens.com/productcert/pdf/ssa-480829.pdf
CVE ID: CVE-2018-4849 State: PUBLISHED Published: 2018-05-03T13:00:00Z Last Updated: 2024-09-16T22:02:06.849Z Vendors: Siemens AG Products: Siveillance VMS Video for Android, Siveillance VMS Video for iOS Problem Types: CWE-295 Description: A vulnerability has been identified in Siveillance VMS Video for Android (All versions < V12.1a (2018 R1)), Siveillance VMS Video for iOS (All versions < V12.1a (2018 R1)). Improper certificate validation could allow an attacker in a privileged network position to read data from and write data to the encrypted communication channel between the app and a server. The security vulnerability could be exploited by an attacker in a privileged network position w
en the app and a server. The security vulnerability could be exploited by an attacker in a privileged network position which allows intercepting the communication channel between the affected app and a server (such as Man-in-the-Middle). Furthermore, an attacker must be able to generate a certificate that results for the validation algorithm in a checksum identical to a trusted certificate. Successful exploitation requires no user interaction. The vulnerability could allow reading data from and writing data to the encrypted communication channel between the app and a server, impacting the communication's confidentiality and integrity. At the time of advisory publication no public exploitatio
, impacting the communication's confidentiality and integrity. At the time of advisory publication no public exploitation of this security vulnerability was known. Siemens confirms the security vulnerability and provides mitigations to resolve the security issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104105 - https://cert-portal.siemens.com/productcert/pdf/ssa-468514.pdf
CVE ID: CVE-2018-4850 State: PUBLISHED Published: 2018-05-16T17:00:00Z Last Updated: 2024-09-16T22:46:02.128Z Vendors: Siemens AG Products: SIMATIC S7-400 (incl. F) CPU hardware version 4.0 and below, SIMATIC S7-400 (incl. F) CPU hardware version 5.0, SIMATIC S7-400H CPU hardware version 4.5 and below Problem Types: CWE-20 Description: A vulnerability has been identified in SIMATIC S7-400 (incl. F) CPU hardware version 4.0 and below (All versions), SIMATIC S7-400 (incl. F) CPU hardware version 5.0 (All firmware versions < V5.2), SIMATIC S7-400H CPU hardware version 4.5 and below (All versions). The affected CPUs improperly validate S7 communication packets which could cause a Denial-of-Servi
below (All versions). The affected CPUs improperly validate S7 communication packets which could cause a Denial-of-Service condition of the CPU. The CPU will remain in DEFECT mode until manual restart. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-914382.pdf - http://www.securityfocus.com/bid/104217 - https://www.siemens.com/global/en/home/products/services/cert.html#SecurityPublications
CVE ID: CVE-2018-4851 State: PUBLISHED Published: 2018-07-03T14:00:00Z Last Updated: 2024-09-17T01:01:16.624Z Vendors: Siemens AG Products: SICLOCK TC100, SICLOCK TC400 Problem Types: CWE-399 Description: A vulnerability has been identified in SICLOCK TC100 (All versions) and SICLOCK TC400 (All versions). An attacker with network access to the device could cause a Denial-of-Service condition by sending certain packets to the device, causing potential reboots of the device. The core functionality of the device could be impacted. The time serving functionality recovers when time synchronization with GPS devices or other NTP servers are completed. Additional Analyst Notes: - CVE Program Contain
ime synchronization with GPS devices or other NTP servers are completed. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104672 - https://cert-portal.siemens.com/productcert/pdf/ssa-197012.pdf
CVE ID: CVE-2018-4852 State: PUBLISHED Published: 2018-07-03T14:00:00Z Last Updated: 2024-09-17T03:07:34.425Z Vendors: Siemens AG Products: SICLOCK TC100, SICLOCK TC400 Problem Types: CWE-288 Description: A vulnerability has been identified in SICLOCK TC100 (All versions) and SICLOCK TC400 (All versions). An attacker with network access to the device could potentially circumvent the authentication mechanism if he/she is able to obtain certain knowledge specific to the attacked device. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104672 - https://cert-portal.siemens.com/productcert/pdf/ssa-197012.pdf
CVE ID: CVE-2018-4853 State: PUBLISHED Published: 2018-07-03T14:00:00Z Last Updated: 2024-09-16T17:32:52.281Z Vendors: Siemens AG Products: SICLOCK TC100, SICLOCK TC400 Problem Types: CWE-306 Description: A vulnerability has been identified in SICLOCK TC100 (All versions) and SICLOCK TC400 (All versions). An attacker with network access to port 69/udp could modify the firmware of the device. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104672 - https://cert-portal.siemens.com/productcert/pdf/ssa-197012.pdf
CVE ID: CVE-2018-4854 State: PUBLISHED Published: 2018-07-03T14:00:00Z Last Updated: 2024-09-16T16:18:48.786Z Vendors: Siemens AG Products: SICLOCK TC100, SICLOCK TC400 Problem Types: CWE-306 Description: A vulnerability has been identified in SICLOCK TC100 (All versions) and SICLOCK TC400 (All versions). An attacker with network access to port 69/udp could modify the administrative client stored on the device. If a legitimate user downloads and executes the modified client from the affected device, then he/she could obtain code execution on the client system. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104672 - https://cert-portal.siemen
alyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104672 - https://cert-portal.siemens.com/productcert/pdf/ssa-197012.pdf
CVE ID: CVE-2018-4855 State: PUBLISHED Published: 2018-07-03T14:00:00Z Last Updated: 2024-09-17T03:08:21.334Z Vendors: Siemens AG Products: SICLOCK TC100, SICLOCK TC400 Problem Types: CWE-311 Description: A vulnerability has been identified in SICLOCK TC100 (All versions) and SICLOCK TC400 (All versions). Unencrypted storage of passwords in the client configuration files and during network transmission could allow an attacker in a privileged position to obtain access passwords. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104672 - https://cert-portal.siemens.com/productcert/pdf/ssa-197012.pdf
CVE ID: CVE-2018-4856 State: PUBLISHED Published: 2018-07-03T14:00:00Z Last Updated: 2024-09-17T03:28:51.189Z Vendors: Siemens AG Products: SICLOCK TC100, SICLOCK TC400 Problem Types: CWE-287 Description: A vulnerability has been identified in SICLOCK TC100 (All versions) and SICLOCK TC400 (All versions). An attacker with administrative access to the device's management interface could lock out legitimate users. Manual interaction is required to restore the access of legitimate users. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104672 - https://cert-portal.siemens.com/productcert/pdf/ssa-197012.pdf
CVE ID: CVE-2018-4857 State: REJECTED Published: 2019-04-17T13:34:21 Last Updated: 2019-04-17T13:34:21 Description: No description available.
CVE ID: CVE-2018-4858 State: PUBLISHED Published: 2018-07-09T19:00:00Z Last Updated: 2024-09-16T17:28:45.619Z Vendors: Siemens AG Products: IEC 61850 system configurator, DIGSI 5 (affected as IEC 61850 system configurator is incorporated), DIGSI 4, SICAM PAS/PQS, SICAM PQ Analyzer, SICAM SCC Problem Types: CWE-284 Description: A vulnerability has been identified in IEC 61850 system configurator (All versions < V5.80), DIGSI 5 (affected as IEC 61850 system configurator is incorporated) (All versions < V7.80), DIGSI 4 (All versions < V4.93), SICAM PAS/PQS (All versions < V8.11), SICAM PQ Analyzer (All versions < V3.11), SICAM SCC (All versions < V9.02 HF3). A service of the affected products l