description: A vulnerability has been identified in SICLOCK TC100 (All versions) and SICLOCK TC400 (All versions). An attacker with network access to port 69/udp could modify the administrative client stored on the device. If a legitimate user downloads and executes the modified client from the affected device, then he/she could obtain code execution on the client system.
problem types: CWE-306: Missing Authentication for Critical Function
affected:
{
product: SICLOCK TC100, SICLOCK TC400
vendor: Siemens AG
versions:
status: affected, version: SICLOCK TC100 : All versions
status: affected, version: SICLOCK TC400 : All versions
}