CVE-2018-4841— Siemens TIM 1531 IRC 安全漏洞

N/A

A vulnerability has been identified in TIM 1531 IRC (All versions < V1.1). A remote attacker with network access to port 80/tcp or port 443/tcp could perform administrative operations on the device without prior authentication. Successful exploitation could allow to cause a denial-of-service, or read and manipulate data as well as configuration settings of the affected device. At the stage of publishing this security advisory no public exploitation is known. Siemens provides mitigations to resolve it.

N/A

认证算法的不正确实现

Siemens TIM 1531 IRC 安全漏洞

Siemens TIM 1531 IRC是德国西门子（Siemens）公司的一款使用Siemens远程控制协议SINAUT ST7处理数据传输的通信模块。 Siemens TIM 1531 IRC 1.1之前版本中存在安全漏洞。远程攻击者可利用该漏洞执行管理操作，造成拒绝服务，或读取并操作数据及配置设置。

N/A

N/A