[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fhvWcxj361OeBQY2qzH76-RvSdgKlaI9-14IyOZfOupM":3,"g5a-risk:CVE-2018-4841":124},{"success":4,"data":5,"meta":122},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":37,"epssPercentile":27,"epssTimeSeries":38,"severity":39,"affectedProducts":40,"affectedProductsCount":50,"references":51,"referencesCount":50,"weaknesses":64,"weaknessesCount":50,"isActivelyExploited":79,"cisaInfo":27,"otxData":27,"relatedBlogPosts":80,"seoMetadata":81,"configurations":106,"relatedVendorCves":120,"notableEvents":121},"CVE-2018-4841","What is CVE-2018-4841?","A vulnerability has been identified in TIM 1531 IRC (All versions \u003C V1.1). A remote attacker with network access to port 80\u002Ftcp or port 443\u002Ftcp could perform administrative operations on the device without prior authentication. Successful exploitation could allow to cause a denial-of-service, or read and manipulate data as well as configuration settings of the affected device. At the stage of publishing this security advisory no public exploitation is known. Siemens provides mitigations to resolve it.","A vulnerability has been identified in TIM 1531 IRC (All versions \u003C V1.1). A remote attacker with network access to port 80\u002Ftcp or port 443\u002Ftcp could perform...","2018-03-29T13:29:00.21","2023-03-24T17:36:34.353",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":30,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,[31],{"Source":17,"Type":18,"CVSSData":32,"BaseSeverity":25,"ExploitabilityScore":36,"ImpactScore":36,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":33,"VectorString":34,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":35,"IntegrityImpact":35,"AvailabilityImpact":35,"BaseScore":36,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:C\u002FI:C\u002FA:C","COMPLETE",10,0.04726,[37,37,37,37,37,37,37],"Critical",[41,46],{"vendor":42,"product":43,"version":44,"criteria":45,"vulnerable":4},"siemens","tim_1531_irc_firmware","*","cpe:2.3:o:siemens:tim_1531_irc_firmware:*:*:*:*:*:*:*:*",{"vendor":42,"product":47,"version":48,"criteria":49,"vulnerable":4},"tim_1531_irc","-","cpe:2.3:h:siemens:tim_1531_irc:-:*:*:*:*:*:*:*",2,[52,59],{"url":53,"source":54,"tags":55},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F103576","Securityfocus",[56,57,58],"Broken Link","Third Party Advisory","VDB Entry",{"url":60,"source":61,"tags":62},"https:\u002F\u002Fcert-portal.siemens.com\u002Fproductcert\u002Fpdf\u002Fssa-110922.pdf","Siemens",[63],"Vendor Advisory",[65,73],{"id":66,"name":67,"description":68,"extendedDescription":69,"status":70,"abstraction":71,"structure":72},"CWE-303","Incorrect Implementation of Authentication Algorithm","The requirements for the product dictate the use of an established authentication algorithm, but the implementation of the algorithm is incorrect.","This incorrect implementation may allow authentication to be bypassed.","Draft","Base","Simple",{"id":74,"name":75,"description":76,"extendedDescription":77,"status":70,"abstraction":78,"structure":72},"CWE-287","Improper Authentication","When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.","","Class",false,[],{"title":82,"metaDescription":83,"keywords":84,"canonicalUrl":85,"structuredData":86},"What is CVE-2018-4841? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2018-4841, a critical severity cyber security vulnerability from 2018. A vulnerability has been identified in TIM 1531 IRC (All...","CVE-2018-4841, CVE-2018-4841 vulnerability, CVE-2018-4841 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, siemens security, tim_1531_irc_firmware vulnerability, tim_1531_irc vulnerability","\u002Fwhat-is\u002Fcve-2018-4841",{"@context":87,"@type":88,"headline":82,"description":83,"datePublished":10,"dateModified":11,"author":89,"publisher":93,"about":97,"mainEntityOfPage":101,"articleSection":104,"keywords":105},"https:\u002F\u002Fschema.org","TechArticle",{"@type":90,"name":91,"url":92},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":90,"name":91,"url":92,"logo":94},{"@type":95,"url":96},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":98,"name":6,"description":99,"additionalType":100},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":102,"@id":103},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2018-4841","Cybersecurity","CVE-2018-4841, CVE-2018-4841 vulnerability, CVE-2018-4841 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[107],{"Operator":108,"Negate":27,"Nodes":109},"AND",[110,116],{"Operator":111,"Negate":27,"CPEMatch":112},"OR",[113],{"Vulnerable":4,"Criteria":45,"MatchCriteriaID":114,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":115,"VersionEndIncluding":27},"9AE61932-8868-48B9-A2F7-286BA6F0DA6B","1.1",{"Operator":111,"Negate":27,"CPEMatch":117},[118],{"Vulnerable":27,"Criteria":49,"MatchCriteriaID":119,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"C1D94BEB-BBFB-4258-9835-87DBBB999239",[],[],{"lastModified":11,"cacheTime":123,"version":33},1792367617399,{"score":125,"band":126,"action":127,"scoredAt":128},54,"Medium","Plan remediation","2026-10-16T06:43:44.177238+00:00"]