Remote Code Execution Vulnerability in TIM 1531 IRC by Siemens

CVE-2018-4841

Summary

A security vulnerability exists in the TIM 1531 IRC device that allows a remote attacker to perform administrative operations without authentication. By exploiting this flaw via network access on ports 80/tcp or 443/tcp, unauthorized users could manipulate data, change configuration settings, or initiate a denial-of-service attack. As of the publication of this advisory, there are no known public exploitations of this vulnerability. Siemens has recommended mitigations for affected devices to enhance security.

References