Read the docs
TI-2018-03418 Aliases CVE-2018-4841GHSA-vj79-837c-gmf4

Improper authentication in Siemens TIM 1531 IRC

Priority MEDIUM 50CWE-303Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-287.

Summary

A vulnerability has been identified in TIM 1531 IRC (All versions < V1.1). A remote attacker with network access to port 80/tcp or port 443/tcp could perform administrative operations on the device without prior authentication. Successful exploitation could allow to cause a denial-of-service, or read and manipulate data as well as configuration settings of the affected device. At the stage of publishing this security advisory no public exploitation is known. Siemens provides mitigations to resolve it.

Why it matters now

EPSS 0.04726 91st percentileScored 2026-11-07
Fix Fixed TIM 1531 IRC (Siemens AG): V1.1

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
SiemensTIM 1531 IRCbefore V1.1V1.1Patch availableCNA
  • TIM 1531 IRC VendorSiemens Affected before V1.1 Fixed in V1.1 Patch available CNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:o:siemens:tim_1531_irc_firmware:*:*:*:*:*:*:*:*before 1.1VulnerableSiemens
cpe:2.3:h:siemens:tim_1531_irc:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
  • cpe:2.3:o:siemens:tim_1531_irc_firmware:*:*:*:*:*:*:*:* Versions before 1.1 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:tim_1531_irc:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens

Remediation

  • Fix · CNA TIM 1531 IRC (Siemens AG) Fixed in V1.1

Timeline

  1. 2026-10-02 Threatist record created from CVE-2018-4841
  2. 2026-10-03 Alias added: GHSA-vj79-837c-gmf4

References

Advisory 1

  • TI-2021-02413 NULL pointer deref in signature_algorithms processing CVSS 3.1MEDIUM 5.9
  • TI-2018-10027 Improper access control in Siemens TIM 1531 IRC CVSS 3.0CRITICAL 10.0
  • TI-2020-16898 Uncontrolled resource consumption in lldp/openvswitch CVSS 3.1HIGH 7.5
  • TI-2021-15266 A vulnerability has been identified in SIMATIC Drive Controller family (All versions <… CVSS 3.1HIGH 7.5
  • TI-2021-15247 A vulnerability has been identified in SIMATIC Drive Controller family (All versions >=… CVSS 3.1HIGH 7.5
  • TI-2021-15267 Memory leak in Siemens SIMATIC Drive Controller family CVSS 3.1HIGH 7.5
See all 15 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences