Riskcovery

CVE-2018-4855

State
Published
Severity
Not scored
Published
Jul 3, 2018
Updated
Sep 17, 2024
Reserved
Jan 2, 2018

Read the record on cve.org

Description

A vulnerability has been identified in SICLOCK TC100 (All versions) and SICLOCK TC400 (All versions). Unencrypted storage of passwords in the client configuration files and during network transmission could allow an attacker in a privileged position to obtain access passwords.

Scores

The record has no CVSS score.

Weaknesses

  • CWE-311 Missing Encryption of Sensitive Data

Affected Products

ProductVersions
SICLOCK TC100, SICLOCK TC400Siemens AG
  • SICLOCK TC100 : All versionsAffected
  • SICLOCK TC400 : All versionsAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.