Emerson OpenBSI
view advisory published 2022-08-09
Successful exploitation of these vulnerabilities could cause remote code execution, change controller configuration, or cause a denial-of-service condition.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-29959US | medium5.5OT elevated | — | ||
Emerson OpenBSI through 2022-04-29 mishandles credential storage. It is an engineering environment for the ControlWave and Bristol Babcock line of RTUs. This environment provides a… | ||||
| CVE-2022-29960US | medium5.5OT elevated | — | ||
Emerson OpenBSI through 2022-04-29 uses weak cryptography. It is an engineering environment for the ControlWave and Bristol Babcock line of RTUs. DES with hardcoded cryptographic k… | ||||
02
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-22-221-03 JSONself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
remediations (4)
- MitigationOpenBSI
CVE-2022-29960—DES (Data Encryption Standard) with hardcoded cryptographic keys is used to protect system credentials, engineering files, and sensitive utilities.
- MitigationOpenBSI
Delete the SecUser.ini file.
- FixedOpenBSI
Delete the UserMngtTool.exe executable from the OpenBSI folder.
- FixedOpenBSI
Delete the UserMngtTool.exe executable from the OpenBSI folder.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan