ICONICS GENESIS32/BizViz Security Configurator Authentication Bypass Vulnerability
This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2012-3018US | medium4.4 | — | ||
The lockout-recovery feature in the Security Configurator component in ICONICS GENESIS32 9.22 and earlier and BizViz 9.22 and earlier uses an improper encryption algorithm for gene… | ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-12-212-01 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-12-212-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (2)
- MitigationBizViz
ICONICS is releasing a patch for the GENESIS32 and BizViz security files for Versions 8.05, 9.01, 9.13, and 9.22 that disable the backdoor security login. In the future, this feature will be re-implemented with a more secure encryption algorithm. ICONICS provides information and links related to their security updates for this and other patches, at their website. (http://www.iconics.com/certs)
http://www.iconics.com/certs - MitigationGENESIS32
ICONICS is releasing a patch for the GENESIS32 and BizViz security files for Versions 8.05, 9.01, 9.13, and 9.22 that disable the backdoor security login. In the future, this feature will be re-implemented with a more secure encryption algorithm. ICONICS provides information and links related to their security updates for this and other patches, at their website. (http://www.iconics.com/certs)
http://www.iconics.com/certs
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan