LenelS2 NetBox
Successful exploitation of these vulnerabilities could allow an attacker to bypass authentication and execute malicious commands with elevated permissions
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-2422US | high8.8 | — | ||
LenelS2 NetBox access control and event monitoring system was discovered to contain an authenticated RCE in versions prior to and including 5.6.1, which allows an attacker to execu… | ||||
| CVE-2024-2421US | critical9.8 | — | ||
LenelS2 NetBox access control and event monitoring system was discovered to contain an unauthenticated RCE in versions prior to and including 5.6.1, which allows an attacker to exe… | ||||
| CVE-2024-2420US | critical9.8OT elevated | — | ||
LenelS2 NetBox access control and event monitoring system was discovered to contain Hardcoded Credentials in versions prior to and including 5.6.1 which allows an attacker to bypas… | ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-24-151-01 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-24-151-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (6)
- MitigationNetBox
For more information, see Carrier's security bulletin for LenelS2.
https://www.corporate.carrier.com/product-security/advisories-resources/ - MitigationNetBox
For more information, see Carrier's security bulletin for LenelS2.
https://www.corporate.carrier.com/product-security/advisories-resources/ - MitigationNetBox
For more information, see Carrier's security bulletin for LenelS2.
https://www.corporate.carrier.com/product-security/advisories-resources/ - FixedNetBox
These vulnerabilities have been mitigated in NetBox release 5.6.2. It is strongly recommended that users upgrade to NetBox release 5.6.2 by contacting their authorized installer.Users should follow recommended deployment guidelines found in the NetBox hardening guide found in the NetBox built-in help menu.
- FixedNetBox
These vulnerabilities have been mitigated in NetBox release 5.6.2. It is strongly recommended that users upgrade to NetBox release 5.6.2 by contacting their authorized installer.Users should follow recommended deployment guidelines found in the NetBox hardening guide found in the NetBox built-in help menu.
- FixedNetBox
These vulnerabilities have been mitigated in NetBox release 5.6.2. It is strongly recommended that users upgrade to NetBox release 5.6.2 by contacting their authorized installer.Users should follow recommended deployment guidelines found in the NetBox hardening guide found in the NetBox built-in help menu.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan