CVE-2018-4836 - AskarLabs CVE Database

CVE-2018-4836

Vendor Siemens Ag

Product TeleControl Server Basic

Weakness CWE-287 · Improper authentication

Published January 25, 2018

Last update September 16, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

A vulnerability has been identified in TeleControl Server Basic < V3.1. An authenticated attacker with a low-privileged account to the TeleControl Server Basic's port 8000/tcp could escalate his privileges and perform administrative operations.

Key dates

02Disclosure timeline

January 25, 2018 CVE published

September 16, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2018-4836 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/287.html

Related vulnerabilities

04Related CVE

CVE-2022-43900 IBM WebSphere Automation for IBM Cloud Pak for Watson AIOps security bypass CVE-2023-5328 SATO CL4NX-J Plus Cookie improper authentication CVE-2026-25748 authentik has a forward authentication bypass with broken cookie CVE-2026-33322 MinIO: JWT Algorithm Confusion in OIDC Authentication CVE-2022-42488 Startup subsystem missed permission validation in param service. An malicious application installed on the device could elevate its privileges to the root user, disable security features, or cause DoS by disabling particular services.