CVE-2018-4854: Missing Authentication for Critical Function

A vulnerability has been identified in SICLOCK TC100 All versions and SICLOCK TC400 All versions. An attacker with network access to port 69/udp could modify the administrative client stored on the device. If a legitimate user downloads and executes the modified client from the affected device,...

CVE-2018-4853: Missing Authentication for Critical Function

A vulnerability has been identified in SICLOCK TC100 All versions and SICLOCK TC400 All versions. An attacker with network access to port 69/udp could modify the firmware of the device...

CVE-2018-4856: Improper Authentication

A vulnerability has been identified in SICLOCK TC100 All versions and SICLOCK TC400 All versions. An attacker with administrative access to the device's management interface could lock out legitimate users. Manual interaction is required to restore the access of legitimate users...

PT-2018-16573

Name of the Vulnerable Software and Affected Versions SICLOCK TC100 All versions SICLOCK TC400 All versions Description A vulnerability has been identified that involves the unencrypted storage of passwords in client configuration files and during network transmission. This could allow an attacke...

PT-2018-16572

Name of the Vulnerable Software and Affected Versions SICLOCK TC100 All versions SICLOCK TC400 All versions Description A vulnerability has been identified that allows an attacker with network access to port 69/udp to modify the administrative client stored on the device. If a legitimate user...

PT-2018-16571

Name of the Vulnerable Software and Affected Versions SICLOCK TC100 All versions SICLOCK TC400 All versions Description A vulnerability has been identified that allows an attacker with network access to port 69/udp to modify the firmware of the device. Recommendations For SICLOCK TC100, restrict...

PT-2018-16574

Name of the Vulnerable Software and Affected Versions SICLOCK TC100 All versions SICLOCK TC400 All versions Description A vulnerability has been identified that allows an attacker with administrative access to the device's management interface to lock out legitimate users, requiring manual...