CVE-2018-4855CWE-311
A vulnerability has been identified in SICLOCK TC100 (All versions) and SICLOCK TC400 (All versions)
published July 3, 2018
What it is
A vulnerability has been identified in SICLOCK TC100 (All versions) and SICLOCK TC400 (All versions). Unencrypted storage of passwords in the client configuration files and during network transmission could allow an attacker in a privileged position to obtain access passwords.
The record
Technical detail
- CVSS
- Not scored
- CVSS v4.0
- Not supplied
- EPSS
- 0.01010 · 62.6th percentile
- Weakness
- CWE-311 · Missing Encryption of Sensitive Data
- Published
- 2018-07-03T14:00Z
EPSS history
Timeline