CVE-2018-4856 is a denial-of-service vulnerability affecting all versions of Siemens SICLOCK TC100 and TC400 devices. An authenticated attacker with administrative access to the management interface can lock out legitimate users, requiring manual intervention to restore access. Rated Medium severity (CVSS 4.9), this vulnerability involves a network attack vector with low complexity, leading to high availability impact. There is no public exploit code (Metasploit, Nuclei, ExploitDB) and it is not listed in CISA's KEV catalog, though it has received some community discussion and media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:o:siemens:siclock_tc400_firmware:-:*:*:*:*:*:*:* | ||
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:o:siemens:siclock_tc100_firmware:-:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.