cnvd - cnvd-2018-12501

CNVD-2018-12501

Vulnerability from cnvd - Published: 2018-07-04

Title

Siemens SICLOCK TC产品拒绝服务漏洞

Description

SICROCK产品系列提供了用于同步工厂和系统时间的组件。 Siemens SICLOCK TC产品存在拒绝服务漏洞。具有网络访问权限的攻击者可能会通过向设备发送某些数据包而导致拒绝服务状况，从而导致设备重新启动。

Severity

高

Patch Name

Siemens SICLOCK TC产品拒绝服务漏洞的补丁

Patch Description

SICROCK产品系列提供了用于同步工厂和系统时间的组件。 Siemens SICLOCK TC产品存在拒绝服务漏洞。具有网络访问权限的攻击者可能会通过向设备发送某些数据包而导致拒绝服务状况，从而导致设备重新启动。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description

用户可参考如下供应商提供的安全公告获得补丁信息： https://cert-portal.siemens.com/productcert/pdf/ssa-197012.pdf

Reference

https://cert-portal.siemens.com/productcert/pdf/ssa-197012.pdf

Impacted products

Name
['Siemens SICLOCK TC100', 'Siemens SICLOCK TC400']

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2018-4851"
    }
  },
  "description": "SICROCK\u4ea7\u54c1\u7cfb\u5217\u63d0\u4f9b\u4e86\u7528\u4e8e\u540c\u6b65\u5de5\u5382\u548c\u7cfb\u7edf\u65f6\u95f4\u7684\u7ec4\u4ef6\u3002\r\n\r\nSiemens SICLOCK TC\u4ea7\u54c1\u5b58\u5728\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\u3002\u5177\u6709\u7f51\u7edc\u8bbf\u95ee\u6743\u9650\u7684\u653b\u51fb\u8005\u53ef\u80fd\u4f1a\u901a\u8fc7\u5411\u8bbe\u5907\u53d1\u9001\u67d0\u4e9b\u6570\u636e\u5305\u800c\u5bfc\u81f4\u62d2\u7edd\u670d\u52a1\u72b6\u51b5\uff0c\u4ece\u800c\u5bfc\u81f4\u8bbe\u5907\u91cd\u65b0\u542f\u52a8\u3002",
  "discovererName": "unknwon",
  "formalWay": "\u7528\u6237\u53ef\u53c2\u8003\u5982\u4e0b\u4f9b\u5e94\u5546\u63d0\u4f9b\u7684\u5b89\u5168\u516c\u544a\u83b7\u5f97\u8865\u4e01\u4fe1\u606f\uff1a\r\nhttps://cert-portal.siemens.com/productcert/pdf/ssa-197012.pdf",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2018-12501",
  "openTime": "2018-07-04",
  "patchDescription": "SICROCK\u4ea7\u54c1\u7cfb\u5217\u63d0\u4f9b\u4e86\u7528\u4e8e\u540c\u6b65\u5de5\u5382\u548c\u7cfb\u7edf\u65f6\u95f4\u7684\u7ec4\u4ef6\u3002\r\n\r\nSiemens SICLOCK TC\u4ea7\u54c1\u5b58\u5728\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\u3002\u5177\u6709\u7f51\u7edc\u8bbf\u95ee\u6743\u9650\u7684\u653b\u51fb\u8005\u53ef\u80fd\u4f1a\u901a\u8fc7\u5411\u8bbe\u5907\u53d1\u9001\u67d0\u4e9b\u6570\u636e\u5305\u800c\u5bfc\u81f4\u62d2\u7edd\u670d\u52a1\u72b6\u51b5\uff0c\u4ece\u800c\u5bfc\u81f4\u8bbe\u5907\u91cd\u65b0\u542f\u52a8\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Siemens SICLOCK TC\u4ea7\u54c1\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Siemens SICLOCK TC100",
      "Siemens SICLOCK TC400"
    ]
  },
  "referenceLink": "https://cert-portal.siemens.com/productcert/pdf/ssa-197012.pdf",
  "serverity": "\u9ad8",
  "submitTime": "2018-07-04",
  "title": "Siemens SICLOCK TC\u4ea7\u54c1\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e"
}

CVE-2018-4851 (GCVE-0-2018-4851)

Vulnerability from cvelistv5 – Published: 2018-07-03 14:00 – Updated: 2024-09-17 01:01

Summary

A vulnerability has been identified in SICLOCK TC100 (All versions) and SICLOCK TC400 (All versions). An attacker with network access to the device could cause a Denial-of-Service condition by sending certain packets to the device, causing potential reboots of the device. The core functionality of the device could be impacted. The time serving functionality recovers when time synchronization with GPS devices or other NTP servers are completed.

Severity ?

No CVSS data available.

CWE

CWE-399 - Resource Management Errors

Assigner

siemens

References

URL

Tags

	http://www.securityfocus.com/bid/104672	vdb-entryx_refsource_BID
	https://cert-portal.siemens.com/productcert/pdf/s…	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	Siemens AG	SICLOCK TC100, SICLOCK TC400	Affected: SICLOCK TC100 : All versions Affected: SICLOCK TC400 : All versions

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T05:18:26.689Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "104672",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/104672"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-197012.pdf"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "SICLOCK TC100, SICLOCK TC400",
          "vendor": "Siemens AG",
          "versions": [
            {
              "status": "affected",
              "version": "SICLOCK TC100 : All versions"
            },
            {
              "status": "affected",
              "version": "SICLOCK TC400 : All versions"
            }
          ]
        }
      ],
      "datePublic": "2018-07-03T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability has been identified in SICLOCK TC100 (All versions) and SICLOCK TC400 (All versions). An attacker with network access to the device could cause a Denial-of-Service condition by sending certain packets to the device, causing potential reboots of the device. The core functionality of the device could be impacted. The time serving functionality recovers when time synchronization with GPS devices or other NTP servers are completed."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-399",
              "description": "CWE-399: Resource Management Errors",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-07-06T09:57:01",
        "orgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
        "shortName": "siemens"
      },
      "references": [
        {
          "name": "104672",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/104672"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-197012.pdf"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "productcert@siemens.com",
          "DATE_PUBLIC": "2018-07-03T00:00:00",
          "ID": "CVE-2018-4851",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "SICLOCK TC100, SICLOCK TC400",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "SICLOCK TC100 : All versions"
                          },
                          {
                            "version_value": "SICLOCK TC400 : All versions"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Siemens AG"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A vulnerability has been identified in SICLOCK TC100 (All versions) and SICLOCK TC400 (All versions). An attacker with network access to the device could cause a Denial-of-Service condition by sending certain packets to the device, causing potential reboots of the device. The core functionality of the device could be impacted. The time serving functionality recovers when time synchronization with GPS devices or other NTP servers are completed."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-399: Resource Management Errors"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "104672",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/104672"
            },
            {
              "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-197012.pdf",
              "refsource": "CONFIRM",
              "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-197012.pdf"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
    "assignerShortName": "siemens",
    "cveId": "CVE-2018-4851",
    "datePublished": "2018-07-03T14:00:00Z",
    "dateReserved": "2018-01-02T00:00:00",
    "dateUpdated": "2024-09-17T01:01:16.624Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CNVD-2018-12501

CVE-2018-4851 (GCVE-0-2018-4851)

Tags

Sightings

Nomenclature