A vulnerability has been identified in TIM 1531 IRC (All versions < V1.1).

Published 8 y ago 2018-03-29 · modified 4 mo ago 2026-06-17 · JSON

CVSS

9.8

v3.1 · NVD

CISA KEV

not known exploited

EPSS

4.7%

percentile 92%

Public exploits

none known

A vulnerability has been identified in TIM 1531 IRC (All versions < V1.1). A remote attacker with network access to port 80/tcp or port 443/tcp could perform administrative operations on the device without prior authentication. Successful exploitation could allow to cause a denial-of-service, or read and manipulate data as well as configuration settings of the affected device. At the stage of publishing this security advisory no public exploitation is known. Siemens provides mitigations to resolve it.

Exploit prediction (EPSS)

4.73% probability of exploitation in the next 30 days, higher than 92% of all scored CVEs.

CVSS scores

Assigned by	Version	Score	Vector
NVD	3.1	9.8	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H`
NVD	2.0	10.0	`AV:N/AC:L/Au:N/C:C/I:C/A:C`

Affected products

Siemens AG TIM 1531 IRC

Classification

Weakness

CWE-303 Incorrect Implementation of Authentication Algorithm
CWE-287 Improper Authentication

References

cert-portal.siemens.com /productcert/pdf/ssa-110922.pdf · x_refsource_CONFIRM, x_transferred
securityfocus.com /bid/103576 · vdb-entry, x_refsource_BID, x_transferred

Sources

CVE List: CVE-2018-4841
NVD: CVE-2018-4841

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.

Summary