VAR-201807-2191
Vulnerability from variot - Updated: 2023-12-18 12:01A vulnerability has been identified in SICLOCK TC100 (All versions) and SICLOCK TC400 (All versions). Unencrypted storage of passwords in the client configuration files and during network transmission could allow an attacker in a privileged position to obtain access passwords. SICLOCK TC100 and SICLOCK TC400 Contains an information disclosure vulnerability.Information may be obtained. The SICROCK product line offers components for synchronizing plant and system time. An information disclosure vulnerability exists in the Siemens SICLOCK TC product. An attacker can exploit the vulnerability to read the device's access password. A denial-of-Service vulnerability 2. An authentication-bypass vulnerability 3. A remote code-execution vulnerability 4. Multiple security-bypass vulnerabilities 5. An information-disclosure vulnerability Exploiting these issues could allow an attacker to bypass authentication mechanism, obtain sensitive information, execute arbitrary code and perform unauthorized actions. Failed exploits can result in a denial-of-service condition. Both Siemens SICLOCK TC100 and SICLOCK TC400 are central clock products of Germany's Siemens (Siemens). This product can provide unified and accurate time information for all network nodes in the LAN
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201807-2191",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "siclock tc100",
"scope": "eq",
"trust": 1.6,
"vendor": "siemens",
"version": null
},
{
"model": "siclock tc400",
"scope": "eq",
"trust": 1.6,
"vendor": "siemens",
"version": null
},
{
"model": "siclock tc100",
"scope": null,
"trust": 1.4,
"vendor": "siemens",
"version": null
},
{
"model": "siclock tc400",
"scope": null,
"trust": 1.4,
"vendor": "siemens",
"version": null
},
{
"model": "siclock tc400",
"scope": "eq",
"trust": 0.3,
"vendor": "siemens",
"version": "0"
},
{
"model": "siclock tc100",
"scope": "eq",
"trust": 0.3,
"vendor": "siemens",
"version": "0"
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "siclock tc400",
"version": null
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "siclock tc100",
"version": null
}
],
"sources": [
{
"db": "IVD",
"id": "e2f66461-39ab-11e9-a686-000c29342cb1"
},
{
"db": "CNVD",
"id": "CNVD-2018-12505"
},
{
"db": "BID",
"id": "104672"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-007862"
},
{
"db": "NVD",
"id": "CVE-2018-4855"
},
{
"db": "CNNVD",
"id": "CNNVD-201807-164"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:siclock_tc400_firmware:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:siclock_tc400:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:siclock_tc100_firmware:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:siclock_tc100:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
}
]
}
],
"sources": [
{
"db": "NVD",
"id": "CVE-2018-4855"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "The vendor reported these issues.",
"sources": [
{
"db": "BID",
"id": "104672"
}
],
"trust": 0.3
},
"cve": "CVE-2018-4855",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"acInsufInfo": false,
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "NVD",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 8.6,
"impactScore": 2.9,
"integrityImpact": "NONE",
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "MEDIUM",
"trust": 1.0,
"userInteractionRequired": true,
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
{
"acInsufInfo": null,
"accessComplexity": "Medium",
"accessVector": "Network",
"authentication": "None",
"author": "NVD",
"availabilityImpact": "None",
"baseScore": 4.3,
"confidentialityImpact": "Partial",
"exploitabilityScore": null,
"id": "CVE-2018-4855",
"impactScore": null,
"integrityImpact": "None",
"obtainAllPrivilege": null,
"obtainOtherPrivilege": null,
"obtainUserPrivilege": null,
"severity": "Medium",
"trust": 0.8,
"userInteractionRequired": null,
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
{
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 4.9,
"id": "CNVD-2018-12505",
"impactScore": 6.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 0.6,
"vectorString": "AV:N/AC:H/Au:N/C:C/I:N/A:N",
"version": "2.0"
},
{
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "IVD",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 4.9,
"id": "e2f66461-39ab-11e9-a686-000c29342cb1",
"impactScore": 6.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 0.2,
"vectorString": "AV:N/AC:H/Au:N/C:C/I:N/A:N",
"version": "2.9 [IVD]"
},
{
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 8.6,
"id": "VHN-134886",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 0.1,
"vectorString": "AV:N/AC:M/AU:N/C:P/I:N/A:N",
"version": "2.0"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"author": "NVD",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"exploitabilityScore": 2.8,
"impactScore": 3.6,
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"trust": 1.0,
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
{
"attackComplexity": "Low",
"attackVector": "Network",
"author": "NVD",
"availabilityImpact": "None",
"baseScore": 6.5,
"baseSeverity": "Medium",
"confidentialityImpact": "High",
"exploitabilityScore": null,
"id": "CVE-2018-4855",
"impactScore": null,
"integrityImpact": "None",
"privilegesRequired": "None",
"scope": "Unchanged",
"trust": 0.8,
"userInteraction": "Required",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
}
],
"severity": [
{
"author": "NVD",
"id": "CVE-2018-4855",
"trust": 1.8,
"value": "MEDIUM"
},
{
"author": "CNVD",
"id": "CNVD-2018-12505",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "CNNVD",
"id": "CNNVD-201807-164",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "IVD",
"id": "e2f66461-39ab-11e9-a686-000c29342cb1",
"trust": 0.2,
"value": "MEDIUM"
},
{
"author": "VULHUB",
"id": "VHN-134886",
"trust": 0.1,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "IVD",
"id": "e2f66461-39ab-11e9-a686-000c29342cb1"
},
{
"db": "CNVD",
"id": "CNVD-2018-12505"
},
{
"db": "VULHUB",
"id": "VHN-134886"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-007862"
},
{
"db": "NVD",
"id": "CVE-2018-4855"
},
{
"db": "CNNVD",
"id": "CNNVD-201807-164"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "A vulnerability has been identified in SICLOCK TC100 (All versions) and SICLOCK TC400 (All versions). Unencrypted storage of passwords in the client configuration files and during network transmission could allow an attacker in a privileged position to obtain access passwords. SICLOCK TC100 and SICLOCK TC400 Contains an information disclosure vulnerability.Information may be obtained. The SICROCK product line offers components for synchronizing plant and system time. An information disclosure vulnerability exists in the Siemens SICLOCK TC product. An attacker can exploit the vulnerability to read the device\u0027s access password. A denial-of-Service vulnerability\n2. An authentication-bypass vulnerability\n3. A remote code-execution vulnerability\n4. Multiple security-bypass vulnerabilities\n5. An information-disclosure vulnerability\nExploiting these issues could allow an attacker to bypass authentication mechanism, obtain sensitive information, execute arbitrary code and perform unauthorized actions. Failed exploits can result in a denial-of-service condition. Both Siemens SICLOCK TC100 and SICLOCK TC400 are central clock products of Germany\u0027s Siemens (Siemens). This product can provide unified and accurate time information for all network nodes in the LAN",
"sources": [
{
"db": "NVD",
"id": "CVE-2018-4855"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-007862"
},
{
"db": "CNVD",
"id": "CNVD-2018-12505"
},
{
"db": "BID",
"id": "104672"
},
{
"db": "IVD",
"id": "e2f66461-39ab-11e9-a686-000c29342cb1"
},
{
"db": "VULHUB",
"id": "VHN-134886"
}
],
"trust": 2.7
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2018-4855",
"trust": 3.6
},
{
"db": "SIEMENS",
"id": "SSA-197012",
"trust": 2.6
},
{
"db": "BID",
"id": "104672",
"trust": 2.0
},
{
"db": "CNNVD",
"id": "CNNVD-201807-164",
"trust": 0.9
},
{
"db": "CNVD",
"id": "CNVD-2018-12505",
"trust": 0.8
},
{
"db": "JVNDB",
"id": "JVNDB-2018-007862",
"trust": 0.8
},
{
"db": "IVD",
"id": "E2F66461-39AB-11E9-A686-000C29342CB1",
"trust": 0.2
},
{
"db": "VULHUB",
"id": "VHN-134886",
"trust": 0.1
}
],
"sources": [
{
"db": "IVD",
"id": "e2f66461-39ab-11e9-a686-000c29342cb1"
},
{
"db": "CNVD",
"id": "CNVD-2018-12505"
},
{
"db": "VULHUB",
"id": "VHN-134886"
},
{
"db": "BID",
"id": "104672"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-007862"
},
{
"db": "NVD",
"id": "CVE-2018-4855"
},
{
"db": "CNNVD",
"id": "CNNVD-201807-164"
}
]
},
"id": "VAR-201807-2191",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "IVD",
"id": "e2f66461-39ab-11e9-a686-000c29342cb1"
},
{
"db": "CNVD",
"id": "CNVD-2018-12505"
},
{
"db": "VULHUB",
"id": "VHN-134886"
}
],
"trust": 1.52
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"ICS"
],
"sub_category": null,
"trust": 0.8
}
],
"sources": [
{
"db": "IVD",
"id": "e2f66461-39ab-11e9-a686-000c29342cb1"
},
{
"db": "CNVD",
"id": "CNVD-2018-12505"
}
]
},
"last_update_date": "2023-12-18T12:01:27.247000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "SSA-197012",
"trust": 0.8,
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-197012.pdf"
},
{
"title": "Siemens SICLOCK TC Product Information Disclosure Vulnerability Patch",
"trust": 0.6,
"url": "https://www.cnvd.org.cn/patchinfo/show/133425"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2018-12505"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-007862"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-311",
"trust": 1.1
},
{
"problemtype": "CWE-200",
"trust": 0.9
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-134886"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-007862"
},
{
"db": "NVD",
"id": "CVE-2018-4855"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.6,
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-197012.pdf"
},
{
"trust": 1.7,
"url": "http://www.securityfocus.com/bid/104672"
},
{
"trust": 0.8,
"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2018-4855"
},
{
"trust": 0.8,
"url": "https://nvd.nist.gov/vuln/detail/cve-2018-4855"
},
{
"trust": 0.3,
"url": "http://www.siemens.com/"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2018-12505"
},
{
"db": "VULHUB",
"id": "VHN-134886"
},
{
"db": "BID",
"id": "104672"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-007862"
},
{
"db": "NVD",
"id": "CVE-2018-4855"
},
{
"db": "CNNVD",
"id": "CNNVD-201807-164"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "IVD",
"id": "e2f66461-39ab-11e9-a686-000c29342cb1"
},
{
"db": "CNVD",
"id": "CNVD-2018-12505"
},
{
"db": "VULHUB",
"id": "VHN-134886"
},
{
"db": "BID",
"id": "104672"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-007862"
},
{
"db": "NVD",
"id": "CVE-2018-4855"
},
{
"db": "CNNVD",
"id": "CNNVD-201807-164"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2018-07-04T00:00:00",
"db": "IVD",
"id": "e2f66461-39ab-11e9-a686-000c29342cb1"
},
{
"date": "2018-07-04T00:00:00",
"db": "CNVD",
"id": "CNVD-2018-12505"
},
{
"date": "2018-07-03T00:00:00",
"db": "VULHUB",
"id": "VHN-134886"
},
{
"date": "2018-07-03T00:00:00",
"db": "BID",
"id": "104672"
},
{
"date": "2018-09-28T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2018-007862"
},
{
"date": "2018-07-03T14:29:00.430000",
"db": "NVD",
"id": "CVE-2018-4855"
},
{
"date": "2018-07-04T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201807-164"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2018-07-04T00:00:00",
"db": "CNVD",
"id": "CNVD-2018-12505"
},
{
"date": "2019-10-09T00:00:00",
"db": "VULHUB",
"id": "VHN-134886"
},
{
"date": "2018-07-03T00:00:00",
"db": "BID",
"id": "104672"
},
{
"date": "2018-09-28T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2018-007862"
},
{
"date": "2019-10-09T23:41:03.093000",
"db": "NVD",
"id": "CVE-2018-4855"
},
{
"date": "2019-10-17T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201807-164"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201807-164"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Siemens SICLOCK TC Product Information Disclosure Vulnerability",
"sources": [
{
"db": "IVD",
"id": "e2f66461-39ab-11e9-a686-000c29342cb1"
},
{
"db": "CNVD",
"id": "CNVD-2018-12505"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "information disclosure",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201807-164"
}
],
"trust": 0.6
}
}
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.