MEAC affected by Windows SMBv3 vulnerability
Microsoft disclosed a critical vulnerability in the way Microsoft Server Message Block 3.1.1 (SMBv3) handles compressed connections. That may allow unauthenticated attackers to execute arbitrary code on a vulnerable device. Since the MEAC central emission monitoring computer (EPC) acts as a SMB server to provide MEAC workstations with access to the filesystem in distributed MEAC-systems, the devices are affected by this vulnerability. Exploitation of this vulnerability could lead to remote code execution under login with administrator privileges.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-0796US | critical10.0OT critical | KEV | ||
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests, aka 'Windows SMBv3 Client/Server Re… | ||||
references
External citations — patches, advisories, analysis.
remediations (4)
- MitigationSICK MEAC2012 with Microsoft Windows 10 Version 1903 & 1909
Should Microsoft's remediation not be possible, we recommend following the workaround suggested by Microsoft and operate the MEAC in a protected networking environment. Blocking TCP port 445 at the perimeter firewall of the network segment will help to protect systems that are behind that firewall from exploits of this vulnerability.
- MitigationSICK MEAC300 with Microsoft Windows 10 Version 1903 & 1909
Should Microsoft's remediation not be possible, we recommend following the workaround suggested by Microsoft and operate the MEAC in a protected networking environment. Blocking TCP port 445 at the perimeter firewall of the network segment will help to protect systems that are behind that firewall from exploits of this vulnerability.
- FixedSICK MEAC2012 with Microsoft Windows 10 Version 1903 & 1909
This issue has been addressed in the Microsoft update for CVE-2020-0796.
https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/adv200005#ID0EUGAC - FixedSICK MEAC300 with Microsoft Windows 10 Version 1903 & 1909
This issue has been addressed in the Microsoft update for CVE-2020-0796.
https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/adv200005#ID0EUGAC
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan