SSA-197012 (Last Update: 2018-07-03): Vulnerabilities in SICLOCK central plant clocks

Risk Summary

<p>SICLOCK TC devices are affected by multiple vulnerabilities that could allow an attacker to cause Denial-of-Service conditions, bypass the authentication, and modify the firmware of the device or the administrative client.</p> <p>SICLOCK TC devices are in a phase out process. Siemens recommends mitigations to reduce the risk.</p>

Remediations

• Refer to Siemens ProductCERT advisory for patch and remediation guidance.

Affected Vendors

Affected Products (1)