Red Lion Sixnet RTUs
Successful exploitation of these vulnerabilities could allow an unauthenticated attacker to execute commands with high privileges.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-42770US | critical9.8OT elevated | — | ||
Red Lion SixTRAK and VersaTRAK Series RTUs with authenticated users enabled (UDR-A) any Sixnet UDR message will meet an authentication challenge over UDP/IP. When the same message… | ||||
| CVE-2023-40151US | critical9.8 | — | ||
When user authentication is not enabled the shell can execute commands with the highest privileges. Red Lion SixTRAK and VersaTRAK Series RTUs with authenticated users enabled (… | ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-23-320-01 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-23-320-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (24)
- MitigationST-IPm-6350
Add one DROP rule which will drop all TCP/IP packet coming on UDR port 1594 by typing the following commands:
- MitigationST-IPm-6350
Add one DROP rule which will drop all TCP/IP packet coming on UDR port 1594 by typing the following commands:
- MitigationST-IPm-8460
Add one DROP rule which will drop all TCP/IP packet coming on UDR port 1594 by typing the following commands:
- MitigationST-IPm-8460
Add one DROP rule which will drop all TCP/IP packet coming on UDR port 1594 by typing the following commands:
- MitigationVT-IPm2m-113-D
Add one DROP rule which will drop all TCP/IP packet coming on UDR port 1594 by typing the following commands:
- MitigationVT-IPm2m-113-D
Add one DROP rule which will drop all TCP/IP packet coming on UDR port 1594 by typing the following commands:
- MitigationVT-IPm2m-213-D
Add one DROP rule which will drop all TCP/IP packet coming on UDR port 1594 by typing the following commands:
- MitigationVT-IPm2m-213-D
Add one DROP rule which will drop all TCP/IP packet coming on UDR port 1594 by typing the following commands:
- MitigationVT-mIPm-135-D
Add one DROP rule which will drop all TCP/IP packet coming on UDR port 1594 by typing the following commands:
- MitigationVT-mIPm-135-D
Add one DROP rule which will drop all TCP/IP packet coming on UDR port 1594 by typing the following commands:
- MitigationVT-mIPm-245-D
Add one DROP rule which will drop all TCP/IP packet coming on UDR port 1594 by typing the following commands:
- MitigationVT-mIPm-245-D
Add one DROP rule which will drop all TCP/IP packet coming on UDR port 1594 by typing the following commands:
- FixedST-IPm-6350
ST-IPm-6350/VT-mIPm-245-D/VT-mIPm-135-D/VT-IPm2m-213-D/VT-IPm2m-113-D - Install 855_patch1_tcp_udr_all_blocked.tar.gz
- FixedST-IPm-6350
ST-IPm-6350/VT-mIPm-245-D/VT-mIPm-135-D/VT-IPm2m-213-D/VT-IPm2m-113-D - Install 855_patch1_tcp_udr_all_blocked.tar.gz
- FixedST-IPm-8460
ST-IPm-8460 - Install 8313_patch1_tcp_udr_all_blocked.tar.gz
- FixedST-IPm-8460
ST-IPm-8460 - Install 8313_patch1_tcp_udr_all_blocked.tar.gz
- FixedVT-IPm2m-113-D
ST-IPm-6350/VT-mIPm-245-D/VT-mIPm-135-D/VT-IPm2m-213-D/VT-IPm2m-113-D - Install 855_patch1_tcp_udr_all_blocked.tar.gz
- FixedVT-IPm2m-113-D
ST-IPm-6350/VT-mIPm-245-D/VT-mIPm-135-D/VT-IPm2m-213-D/VT-IPm2m-113-D - Install 855_patch1_tcp_udr_all_blocked.tar.gz
- FixedVT-IPm2m-213-D
ST-IPm-6350/VT-mIPm-245-D/VT-mIPm-135-D/VT-IPm2m-213-D/VT-IPm2m-113-D - Install 855_patch1_tcp_udr_all_blocked.tar.gz
- FixedVT-IPm2m-213-D
ST-IPm-6350/VT-mIPm-245-D/VT-mIPm-135-D/VT-IPm2m-213-D/VT-IPm2m-113-D - Install 855_patch1_tcp_udr_all_blocked.tar.gz
- FixedVT-mIPm-135-D
ST-IPm-6350/VT-mIPm-245-D/VT-mIPm-135-D/VT-IPm2m-213-D/VT-IPm2m-113-D - Install 855_patch1_tcp_udr_all_blocked.tar.gz
- FixedVT-mIPm-135-D
ST-IPm-6350/VT-mIPm-245-D/VT-mIPm-135-D/VT-IPm2m-213-D/VT-IPm2m-113-D - Install 855_patch1_tcp_udr_all_blocked.tar.gz
- FixedVT-mIPm-245-D
ST-IPm-6350/VT-mIPm-245-D/VT-mIPm-135-D/VT-IPm2m-213-D/VT-IPm2m-113-D - Install 855_patch1_tcp_udr_all_blocked.tar.gz
- FixedVT-mIPm-245-D
ST-IPm-6350/VT-mIPm-245-D/VT-mIPm-135-D/VT-IPm2m-213-D/VT-IPm2m-113-D - Install 855_patch1_tcp_udr_all_blocked.tar.gz
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan