Vulnerability record · CVE-2018-4841 · published 29 March 2018
CVE-2018-4841: Siemens tim 1531 irc firmware improper authentication vulnerability
Siemens · Tim 1531 Irc Firmware
A vulnerability has been identified in TIM 1531 IRC (All versions < V1.1). A remote attacker with network access to port 80/tcp or port 443/tcp could perform administrative operations on the device without prior authentication. Successful exploitation could allow to cause a denial-of-service, or read and manipulate data as well as configuration settings of the affected device. At the stage of publishing this security advisory no public exploitation is known. Siemens provides mitigations to resolve it.
Description
A vulnerability has been identified in TIM 1531 IRC (All versions < V1.1). A remote attacker with network access to port 80/tcp or port 443/tcp could perform administrative operations on the device without prior authentication. Successful exploitation could allow to cause a denial-of-service, or read and manipulate data as well as configuration settings of the affected device. At the stage of publishing this security advisory no public exploitation is known. Siemens provides mitigations to resolve it.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.
References
| Link | Tags |
|---|---|
| http://www.securityfocus.com/bid/103576 | Broken LinkThird Party AdvisoryVDB Entry |
| https://cert-portal.siemens.com/productcert/pdf/ssa-110922.pdf | Vendor Advisory |
| http://www.securityfocus.com/bid/103576 | Broken LinkThird Party AdvisoryVDB Entry |
| https://cert-portal.siemens.com/productcert/pdf/ssa-110922.pdf | Vendor Advisory |
Track CVE-2018-4841 inside VULONE
Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.
Related vulnerabilities
Same products first, then exploited flaws of the same weakness class.
Source: NIST National Vulnerability Database (record CVE-2018-4841), CISA KEV, FIRST EPSS (scores of 2026-10-14). This page is refreshed as NVD updates the record.
