CVE-2018-13816 Auth bypass in TIM 1531 IRC
An attacker can bypass authentication on port 102/tcp of the Siemens TIM 1531 IRC device, gaining unauthorized access without user interaction.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2018-13816?
CVE-2018-13816 is a critical authentication bypass vulnerability in Siemens AG TIM 1531 IRC, published on 12 Dec 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A vulnerability has been identified in TIM 1531 IRC (All version < V2.0). The devices was missing proper authentication on port 102/tcp, although configured. Successful exploitation requires an attacker to be able to send packets to port 102/tcp of the affected device. No user interaction and no user privileges are required to exploit the vulnerability. At the time of advisory publication no public exploitation of this vulnerability was known.
Which versions are affected by CVE-2018-13816?
It affects 1 product.
Products include Siemens Tim 1531 Irc Firmware.
How do I fix CVE-2018-13816?
No fix has been published for CVE-2018-13816 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2018-13816 being exploited?
There is no known exploitation of CVE-2018-13816 in the wild and no public exploit code.
Other vulnerabilities in Siemens AG TIM 1531 IRC
Sources
Also known as GHSA-vx39-fw57-q8mc.