ICSA-24-235-04

Avtec Outpost 0810

view advisory published 2024-08-22

Successful exploitation of these vulnerabilities could allow an attacker to gain administrative privileges on the affected devices.

describes (2)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2024-42418US	high7.5OT elevated	0.37% (31st)	—	2024-08-22
Avtec Outpost uses a default cryptographic key that can be used to decrypt sensitive information.
CVE-2024-39776US	high7.5	0.39% (33rd)	—	2024-08-22
Avtec Outpost stores sensitive information in an insecure location without proper access controls in place.

External citations — patches, advisories, analysis.

MitigationOutpost 0810
Avtec recommends users update to Outpost v5.0 to resolve.
MitigationOutpost 0810
Avtec recommends users update to Outpost v5.0 to resolve.
MitigationOutpost Uploader Utility
Avtec recommends users update to Outpost v5.0 to resolve.
MitigationOutpost Uploader Utility
Avtec recommends users update to Outpost v5.0 to resolve.
FixedOutpost Uploader Utility
When upgrading to Outpost Version 5.0.0 or later, you must reset your list of users to the default. More information and instructions can be found on Avtec's Outpost Uploader Utility User Guide for more information.
https://connect.avtecinc.com/bundle/Outpost_Uploader_Utility_User_Guide/page/Content/Outpost_User_Guide/Reset_Web_Auth.html
FixedOutpost Uploader Utility
When upgrading to Outpost Version 5.0.0 or later, you must reset your list of users to the default. More information and instructions can be found on Avtec's Outpost Uploader Utility User Guide for more information.
https://connect.avtecinc.com/bundle/Outpost_Uploader_Utility_User_Guide/page/Content/Outpost_User_Guide/Reset_Web_Auth.html

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.