ICSA-21-054-03

icsaUScisa_csaf_ot

Advantech Spectre RT Industrial Routers

view advisory published 2021-02-23

Successful exploitation of these vulnerabilities may allow information disclosure, deletion of files, and remote code execution.

01

describes (5)

Related CVEs.

IDseverity exploitable
CVE-2019-18235UScritical9.8—
Advantech Spectre RT ERT351 Versions 5.1.3 and prior has insufficient login authentication parameters required for the web application may allow an attacker to gain full access usi…
CVE-2019-18233USmedium6.1—
In Advantech Spectre RT Industrial Routers ERT351 5.1.3 and prior, the affected product does not neutralize special characters in the error response, allowing attackers to use a re…
CVE-2019-18231UShigh7.5OT elevated—
Advantech Spectre RT ERT351 Versions 5.1.3 and prior logins and passwords are transmitted in clear text form, which may allow an attacker to intercept the request.
CVE-2018-20679UShigh7.5OT elevated—
An issue was discovered in BusyBox before 1.30.0. An out of bounds read in udhcp components (consumed by the DHCP server, client, and relay) allows a remote attacker to leak sensit…
CVE-2016-6301UShigh7.5—
The recv_and_process_client_pkt function in networking/ntpd.c in busybox allows remote attackers to cause a denial of service (CPU and bandwidth consumption) via a forged NTP packe…
02

references

External citations — patches, advisories, analysis.

03

remediations (5)

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan