VDE-2017-002

csafDEphoenix_contact_psirt

PHOENIX CONTACT: mGuard device manager (mdm) multiple vulnerabilities in Java SE

view advisory published 2017-09-07

Multiple security issues and vulnerabilities in Oracle Java SE possibly affecting mGuard device manager (mdm / FL MGUARD DM) 1.8.0 and older.

01

describes (10)

Related CVEs.

IDseverity exploitable
CVE-2017-10198USmedium6.8—
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u1…
CVE-2017-10176UShigh7.5—
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 7u141 and 8u131; Jav…
CVE-2017-10135USmedium5.9—
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; J…
CVE-2017-10118UShigh7.5—
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE). Supported versions that are affected are Java SE: 7u141 and 8u131; Java SE…
CVE-2017-10116UShigh8.3—
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u1…
CVE-2017-10115UShigh7.5—
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; J…
CVE-2017-10108USmedium5.3—
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u151, 7u141 an…
CVE-2017-10102UScritical9.0—
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Em…
CVE-2017-10078UShigh8.1—
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Scripting). The supported version that is affected is Java SE: 8u131. Easily exploitable vulnerability allow…
CVE-2017-10053USmedium5.3—
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: 2D). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Ja…
02

references

External citations — patches, advisories, analysis.

03

remediations (20)

  • FixedPhoenix Contact FL MGUARD DM <=1.8.0 installed on Linux

    PHOENIX CONTACT recommends that all users of the affected product on Linux should update Java to the latest version. When using the packet source delivered by PHOENIX CONTACT on Ubuntu, this is simply done by using the software updater of the operating system.

  • FixedPhoenix Contact FL MGUARD DM <=1.8.0 installed on Linux

    PHOENIX CONTACT recommends that all users of the affected product on Linux should update Java to the latest version. When using the packet source delivered by PHOENIX CONTACT on Ubuntu, this is simply done by using the software updater of the operating system.

  • FixedPhoenix Contact FL MGUARD DM <=1.8.0 installed on Linux

    PHOENIX CONTACT recommends that all users of the affected product on Linux should update Java to the latest version. When using the packet source delivered by PHOENIX CONTACT on Ubuntu, this is simply done by using the software updater of the operating system.

  • FixedPhoenix Contact FL MGUARD DM <=1.8.0 installed on Linux

    PHOENIX CONTACT recommends that all users of the affected product on Linux should update Java to the latest version. When using the packet source delivered by PHOENIX CONTACT on Ubuntu, this is simply done by using the software updater of the operating system.

  • FixedPhoenix Contact FL MGUARD DM <=1.8.0 installed on Linux

    PHOENIX CONTACT recommends that all users of the affected product on Linux should update Java to the latest version. When using the packet source delivered by PHOENIX CONTACT on Ubuntu, this is simply done by using the software updater of the operating system.

  • FixedPhoenix Contact FL MGUARD DM <=1.8.0 installed on Linux

    PHOENIX CONTACT recommends that all users of the affected product on Linux should update Java to the latest version. When using the packet source delivered by PHOENIX CONTACT on Ubuntu, this is simply done by using the software updater of the operating system.

  • FixedPhoenix Contact FL MGUARD DM <=1.8.0 installed on Linux

    PHOENIX CONTACT recommends that all users of the affected product on Linux should update Java to the latest version. When using the packet source delivered by PHOENIX CONTACT on Ubuntu, this is simply done by using the software updater of the operating system.

  • FixedPhoenix Contact FL MGUARD DM <=1.8.0 installed on Linux

    PHOENIX CONTACT recommends that all users of the affected product on Linux should update Java to the latest version. When using the packet source delivered by PHOENIX CONTACT on Ubuntu, this is simply done by using the software updater of the operating system.

  • FixedPhoenix Contact FL MGUARD DM <=1.8.0 installed on Linux

    PHOENIX CONTACT recommends that all users of the affected product on Linux should update Java to the latest version. When using the packet source delivered by PHOENIX CONTACT on Ubuntu, this is simply done by using the software updater of the operating system.

  • FixedPhoenix Contact FL MGUARD DM <=1.8.0 installed on Linux

    PHOENIX CONTACT recommends that all users of the affected product on Linux should update Java to the latest version. When using the packet source delivered by PHOENIX CONTACT on Ubuntu, this is simply done by using the software updater of the operating system.

  • FixedPhoenix Contact FL MGUARD DM <=1.8.0 installed on Microsoft Windows

    PHOENIX CONTACT recommends that all users of the affected product on Windows should update to at least version 1.8.0.1. The update can be performed by simply executing the installer for version 1.8.0.1 on a Windows system where the product is installed in version 1.8.0. The installer is available for download on the product page external link, in section 'Software' on the Downloads tab. For more information please refer to the document 'How to upgrade mGuard device manager' downloaded with the installer.

  • FixedPhoenix Contact FL MGUARD DM <=1.8.0 installed on Microsoft Windows

    PHOENIX CONTACT recommends that all users of the affected product on Windows should update to at least version 1.8.0.1. The update can be performed by simply executing the installer for version 1.8.0.1 on a Windows system where the product is installed in version 1.8.0. The installer is available for download on the product page external link, in section 'Software' on the Downloads tab. For more information please refer to the document 'How to upgrade mGuard device manager' downloaded with the installer.

  • FixedPhoenix Contact FL MGUARD DM <=1.8.0 installed on Microsoft Windows

    PHOENIX CONTACT recommends that all users of the affected product on Windows should update to at least version 1.8.0.1. The update can be performed by simply executing the installer for version 1.8.0.1 on a Windows system where the product is installed in version 1.8.0. The installer is available for download on the product page external link, in section 'Software' on the Downloads tab. For more information please refer to the document 'How to upgrade mGuard device manager' downloaded with the installer.

  • FixedPhoenix Contact FL MGUARD DM <=1.8.0 installed on Microsoft Windows

    PHOENIX CONTACT recommends that all users of the affected product on Windows should update to at least version 1.8.0.1. The update can be performed by simply executing the installer for version 1.8.0.1 on a Windows system where the product is installed in version 1.8.0. The installer is available for download on the product page external link, in section 'Software' on the Downloads tab. For more information please refer to the document 'How to upgrade mGuard device manager' downloaded with the installer.

  • FixedPhoenix Contact FL MGUARD DM <=1.8.0 installed on Microsoft Windows

    PHOENIX CONTACT recommends that all users of the affected product on Windows should update to at least version 1.8.0.1. The update can be performed by simply executing the installer for version 1.8.0.1 on a Windows system where the product is installed in version 1.8.0. The installer is available for download on the product page external link, in section 'Software' on the Downloads tab. For more information please refer to the document 'How to upgrade mGuard device manager' downloaded with the installer.

  • FixedPhoenix Contact FL MGUARD DM <=1.8.0 installed on Microsoft Windows

    PHOENIX CONTACT recommends that all users of the affected product on Windows should update to at least version 1.8.0.1. The update can be performed by simply executing the installer for version 1.8.0.1 on a Windows system where the product is installed in version 1.8.0. The installer is available for download on the product page external link, in section 'Software' on the Downloads tab. For more information please refer to the document 'How to upgrade mGuard device manager' downloaded with the installer.

  • FixedPhoenix Contact FL MGUARD DM <=1.8.0 installed on Microsoft Windows

    PHOENIX CONTACT recommends that all users of the affected product on Windows should update to at least version 1.8.0.1. The update can be performed by simply executing the installer for version 1.8.0.1 on a Windows system where the product is installed in version 1.8.0. The installer is available for download on the product page external link, in section 'Software' on the Downloads tab. For more information please refer to the document 'How to upgrade mGuard device manager' downloaded with the installer.

  • FixedPhoenix Contact FL MGUARD DM <=1.8.0 installed on Microsoft Windows

    PHOENIX CONTACT recommends that all users of the affected product on Windows should update to at least version 1.8.0.1. The update can be performed by simply executing the installer for version 1.8.0.1 on a Windows system where the product is installed in version 1.8.0. The installer is available for download on the product page external link, in section 'Software' on the Downloads tab. For more information please refer to the document 'How to upgrade mGuard device manager' downloaded with the installer.

  • FixedPhoenix Contact FL MGUARD DM <=1.8.0 installed on Microsoft Windows

    PHOENIX CONTACT recommends that all users of the affected product on Windows should update to at least version 1.8.0.1. The update can be performed by simply executing the installer for version 1.8.0.1 on a Windows system where the product is installed in version 1.8.0. The installer is available for download on the product page external link, in section 'Software' on the Downloads tab. For more information please refer to the document 'How to upgrade mGuard device manager' downloaded with the installer.

  • FixedPhoenix Contact FL MGUARD DM <=1.8.0 installed on Microsoft Windows

    PHOENIX CONTACT recommends that all users of the affected product on Windows should update to at least version 1.8.0.1. The update can be performed by simply executing the installer for version 1.8.0.1 on a Windows system where the product is installed in version 1.8.0. The installer is available for download on the product page external link, in section 'Software' on the Downloads tab. For more information please refer to the document 'How to upgrade mGuard device manager' downloaded with the installer.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan